Lifecycle Timeline
1DescriptionCVE.org
Alpine Linux: dotnet8-runtime fixed in 8.0.21-r0
AnalysisAI
dotnet8-runtime on Alpine Linux received a security fix in package version 8.0.21-r0, addressing an unspecified vulnerability. The nature, root cause, and exploitability of the underlying flaw are not described in available intelligence sources - only the patched Alpine package version is confirmed. EPSS score of 0.03% (9th percentile) indicates very low observed exploitation probability, and no public exploit code or active exploitation has been identified.
Technical ContextAI
The affected component is the .NET 8 runtime packaged for Alpine Linux (musl libc-based distribution), distributed through Alpine's apk package management system. Alpine Linux packages .NET independently of Microsoft's official distribution channels, and security fixes may lag or align with upstream Microsoft .NET releases. No CWE classification is available in the provided data, making root cause analysis (e.g., memory corruption, privilege escalation, input validation) impossible without additional vendor disclosure. No CPE string was provided, but the affected package is identifiable as dotnet8-runtime on Alpine Linux prior to package version 8.0.21-r0.
Affected ProductsAI
The affected product is dotnet8-runtime as packaged by Alpine Linux, in versions prior to 8.0.21-r0. The vulnerability is specific to Alpine Linux's packaging of the .NET 8 runtime; other Linux distributions or Windows/macOS deployments of .NET 8 runtime may be separately affected or unaffected depending on whether the underlying issue originates from Alpine's build/packaging or from upstream Microsoft .NET 8 source code. No CPE string or vendor advisory URL was provided in the available intelligence data.
RemediationAI
Upgrade the dotnet8-runtime Alpine package to version 8.0.21-r0 or later by running 'apk upgrade dotnet8-runtime' on affected Alpine Linux systems. This is the vendor-confirmed fix per Alpine Linux security reporting. No workarounds or compensating controls are described in available data, as the vulnerability's nature is undisclosed. If immediate patching is not possible, consider restricting network exposure of services depending on the .NET 8 runtime until the upgrade can be applied. No vendor advisory URL was included in the provided intelligence; consult Alpine Linux's security tracker for additional context.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today