ALSA-2023:4644 Important: .NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.121 and .NET Runtime 6.0.21...

ALSA-2023:4645 Important: .NET 6.0 security, bug fix, and enhancement update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.121 and .NET Runtime 6.0.21...

CISA Adds Microsoft .NET Vulnerability to KEV Catalog Due to Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a recently patched security flaw in Microsoft's .NET and Visual Studio products to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. Tracked as CVE-2023-38180 CVSS score: 7.5, the...

Ubuntu: Security Advisory (USN-6278-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6278-2: .NET vulnerabilities

USN-6278-1 fixed several vulnerabilities in .NET. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: It was discovered that .NET did properly handle the execution of certain commands. An attacker could possibly use this issue to achieve remote code...

VulnCheck KEV: CVE-2023-38180

Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service DoS...

CVE-2023-38180

creationtimestamp| type| source ---|---|--- 2023-08-08 22:20:25+00:00| seen| https://t.me/cibsecurity/68048 2023-08-09 10:07:43+00:00| seen| https://t.me/kasperskyb2b/792 2023-08-09 11:06:10+00:00| seen| https://t.me/truesecator/4707 2023-08-09 12:30:05+00:00| exploited| https://t.me/itsecnews/30...

USN-6278-1: .NET vulnerabilities

It was discovered that .NET did not properly handle the execution of certain commands. An attacker could possibly use this issue to achieve remote code execution. CVE-2023-35390 Benoit Foucher discovered that .NET did not properly implement the QUIC stream limit in HTTP/3. An attacker could...

CVE-2023-38180

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2023-38180

CVE-2023-38180 is a .NET/Visual Studio denial-of-service vulnerability (DoS) affecting .NET Core and related components. The CVSSv3.1 vector indicates Network attack, low attack complexity, no privileges required, with no confidentiality/integirty impact but a High availability impact. Moderate-t...

CVE-2023-38180

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability

...

CVE-2023-38180

An uncontrolled resource consumption vulnerability was found in the Kestrel component of the dotNET. When detecting a potentially malicious client, Kestrel will sometimes fail to disconnect it, resulting in denial of service. Mitigation If your application is running behind a reverse proxy, or We...

CVE-2023-38180

.NET and Visual Studio Denial of Service Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2023-38180

.NET and Visual Studio Denial of Service Vulnerability...

Security Update for Microsoft .NET Core (August 2023)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023Aug08 advisory. - .NET and Visual Studio Remote Code Execution Vulnerability CVE-2023-35390 - ASP.NET Core SignalR and Visual Stud...

CVE-2022-38180

creationtimestamp| type| source ---|---|--- 2022-08-12 14:33:16+00:00| seen| https://t.me/cibsecurity/48012...

CVE-2022-38180

CVE-2022-38180 affects JetBrains Ktor prior to 2.1.0. The issue is a misselection of the authentication provider in some cases, due to the wrong provider being chosen. The CVSS metrics indicate a High confidentiality impact with no integrity/availability impact, and there is a network attack vect...

CVE-2021-38180

creationtimestamp| type| source ---|---|--- 2021-10-12 18:25:42+00:00| seen| https://t.me/cibsecurity/30416...

CVE-2021-38180

SAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to Excel CSV injection due to improper sanitation during the data export. An attacker could thereby execute arbitrary commands on the victim's computer but only if the victim allows to execute macros while...