ALSA-2024:3340 Important: .NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19...

Security Updates for Microsoft Visual Studio Products (May 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution. CVE-2024-32002 - Remote Code Execution while...

USN-6773-1: .NET vulnerabilities

It was discovered that .NET did not properly handle memory in it's Double Parse routine. An attacker could possibly use this issue to achieve remote code execution. CVE-2024-30045 It was discovered that .NET did not properly handle the usage of a shared resource. An attacker could possibly use th...

AlmaLinux 9 : .NET 8.0 (ALSA-2024:2842)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:2842 advisory. - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-30045 - Visual Studio Denial of Service Vulnerability CVE-2024-30046 Note that Nessu...

AlmaLinux 9 : .NET 7.0 (ALSA-2024:2843)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:2843 advisory. - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-30045 - Visual Studio Denial of Service Vulnerability CVE-2024-30046 Note that Nessu...

Security Update for Microsoft .NET Core SDK (May 2024)

The version of .NET Core SDK installed on the remote host is 7.x prior to 7.0.19 or 8.x prior to 8.0.5. It is, therefore, affected by remote code execution vulnerability as referenced in the May 2024 advisory: - A remote code execution vulnerability. An attacker can exploit this to bypass...

.NET Core Multiple Vulnerabilities (KB5038351)

This host is missing an important security update according to Microsoft KB5038351. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle Linux 9 : .NET / 7.0 (ELSA-2024-2843)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2843 advisory. 7.0.119-1.0.1 - Add OracleLinux support Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Important: .NET 7.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19...

GHSA-7FCR-8QW6-92FR Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability

Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory also provides guidance on what developers can do to update their applications t...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to a stack buffer overrun in the Double Parse routine. An attacker can execute arbitrary code by supplying a specially crafted input that triggers the buffer overrun. Remediation Upgrade...

CVE-2024-30045

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2024-30045

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2024-30045 .NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2024-30045

CVE-2024-30045 is a .NET/Visual Studio Remote Code Execution vulnerability caused by a stack buffer overrun in the Double Parse routine. It affects .NET 7.0 up to 7.0.18 and .NET 8.0 up to 8.0.4; patched versions are 7.0.19 and 8.0.5 ( Microsoft/MSRC advisory; GHSA entry lists affected packages a...

CVE-2024-30045 .NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2024-30045

.NET and Visual Studio Remote Code Execution Vulnerability...

Important: .NET 8.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5...

CVE-2024-30045

.NET and Visual Studio Remote Code Execution Vulnerability...

Security Update for Microsoft .NET Core (May 2024)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-30045 Note that Nessus has not tested for this issue but...