[SECURITY] Fedora 37 Update: dotnet7.0-7.0.107-1.fc37

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

USN-6161-2 dotnet6, dotnet7 regression

USN-6161-1 fixed vulnerabilities in .NET. The update introduced a regression with regards to how the runtime imported X.509 certificates. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that .NET did not properly enforce certain...

.NET 7.0 Update - June 22, 2023 (KB5028614)

None None...

CVE-2023-32030

A vulnerability was found in dotnet that can cause a denial of service...

CVE-2023-29326

A vulnerability was found in dotnet. This issue can allow remote code execution. The attack itself is carried out locally, and requires user interaction...

CVE-2023-29326

.NET Framework Remote Code Execution Vulnerability...

CVE-2023-24936

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...

CVE-2023-29326

.NET Framework Remote Code Execution Vulnerability...

CVE-2023-32030

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2023-24895

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...

CVE-2023-32030

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2023-32030 .NET and Visual Studio Denial of Service Vulnerability

...

dotnet: .NET Kestrel: Denial of Service processing X509 Certificates

A vulnerability was found in dotnet. This issue can lead to a denial of service while processing X509 Certificates...

dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML

A flaw was found in dotnet. This issue can allow bypass restrictions when deserializing a DataSet or DataTable from XML...

dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument

A vulnerability was found in dotnet. This issue can cause an elevation of privilege when the TarFile.ExtractToDirectory ignores the extraction directory argument...

dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption

A vulnerability was found in dotnet. This issue may allow remote code execution via source generators that can lead to a crash due to unmanaged heap corruption...

dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack

A vulnerability was found in dotnet. This issue exists in NuGet where a potential race condition can lead to a symlink attack...

dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument

A vulnerability was found in dotnet. This issue can cause an elevation of privilege when the TarFile.ExtractToDirectory ignores the extraction directory argument...

dotnet: .NET Kestrel: Denial of Service processing X509 Certificates

A vulnerability was found in dotnet. This issue can lead to a denial of service while processing X509 Certificates...

dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack

A vulnerability was found in dotnet. This issue exists in NuGet where a potential race condition can lead to a symlink attack...