Microsoft security update for CVE-2019-0757
🔗 CVE IDs covered (1)
📋 Microsoft's advisory
EchelonGraph does not copy Microsoft's advisory page: its FAQ and remediation text are not shown here. Read the advisory on https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0757. This page also shows what EchelonGraph holds for CVE-2019-0757, with the description from its CVE record, which the CVE Numbering Authority that assigned the CVE wrote: for a CVE Microsoft assigned, often in the words of Microsoft's own advisory.
🎯 Affected products14
- .NET Core SDK 1.1 on .NET Core 1.0
- .NET Core SDK 1.1 on .NET Core 1.1
- .NET Core SDK 2.1.500 on .NET Core 2.1
- .NET Core SDK 2.2.100 on .NET Core 2.2
- Mono Framework Version 5.18.0.223
- Mono Framework Version 5.20.0
- Nuget 4.3.1
- Nuget 4.4.2
- Nuget 4.5.2
- Nuget 4.6.3
- Nuget 4.7.2
- Nuget 4.8.2
- Nuget 4.9.4
- Visual Studio 2017 for Mac
✅ Updates Microsoft lists: 1 update
1 row: one per KB article or update, update type and fixed build. Their details are on Microsoft's advisory.
| KB article | Update | Fixed build |
|---|---|---|
| — | Security Update | — |
🧭 EchelonGraph on CVE-2019-0757
- EchelonGraph score
- 6.5 MEDIUM
- CISA KEV
- Not listed
- Fix status
- A fix is available — apply it.
Description from the CVE record (CVE.org), as published by its numbering authority
A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet Package Manager Tampering Vulnerability'.
Published by Microsoft Corporation, the CVE Numbering Authority that assigned CVE-2019-0757, in its CVE record at CVE.org; reused under the CVE Program's Terms of Use (its licence and MITRE's copyright notice are in our Terms of Service).