GHSA-447R-WPH3-92PM vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-bootstrap...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...

GHSA-447R-WPH3-92PM vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-bootstrap...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation through the parsing of X.509 certificates. An attacker can cause excessive CPU consumption and disrupt service by submitting a specially crafted malicious certificate. Remediation Upgrade...

GHSA-HH2W-P6RV-4G7W vulnerabilities

Vulnerabilities for packages: dotnet...

GHSA-HH2W-P6RV-4G7W vulnerabilities

Vulnerabilities for packages: dotnet...

CVE-2024-38095 vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-bootstrap...

CVE-2024-38095 vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-bootstrap...

CVE-2024-35264

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2024-30105 vulnerabilities

Vulnerabilities for packages: dotnet...

CVE-2024-30105 vulnerabilities

Vulnerabilities for packages: dotnet...

PT-2024-4734 · Microsoft +8 · Visual Studio +10

Name of the Vulnerable Software and Affected Versions: .NET Core versions prior to 8.x Visual Studio versions prior to 8.x Description: The issue is related to an uncontrolled resource consumption in the JsonSerializer.DeserializeAsyncEnumerable method of the System.Text.Json library in Microsoft...

UBUNTU-CVE-2024-30105

.NET and Visual Studio Denial of Service Vulnerability...

UBUNTU-CVE-2024-38081

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...

Microsoft Visual Studio and Microsoft .NET Security Vulnerabilities

Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

Microsoft Visual Studio and Microsoft .NET Security Vulnerabilities

Microsoft Visual Studio and Microsoft .NET are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...