April 25, 2023-KB5025368 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11, version 21H2

None None...

GHSA-W4M3-43GP-X8HX vulnerabilities

Vulnerabilities for packages: dotnet...

GHSA-W4M3-43GP-X8HX vulnerabilities

Vulnerabilities for packages: dotnet...

CVE-2023-28260 vulnerabilities

Vulnerabilities for packages: dotnet...

CVE-2023-28260 vulnerabilities

Vulnerabilities for packages: dotnet...

USN-6006-1 dotnet6, dotnet7 vulnerability

It was discovered that .NET did not properly manage dll files. An attacker could potentially use this issue to execute arbitrary code...

CVE-2023-28260 .NET DLL Hijacking Remote Code Execution Vulnerability

...

CVE-2023-28260

A vulnerability was found in dotNet. A runtime DLL may be loaded from an unexpected location, resulting in remote code execution...

Microsoft .NET Core 安全漏洞

Microsoft .NET Core is a free open source development platform from Microsoft USA. The platform features multi-language support and cross-platform. NET has a DLL hijacking remote code execution vulnerability that can be exploited by an attacker to remotely execute code...

CVE-2023-21808

A vulnerability exists in how dotnet reads debugging symbols. Reading a malicious symbols file may result in remote code execution...

Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-092)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-092 advisory. .NET Core and Visual Studio Denial of Service Vulnerability. CVE-2022-38013 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has...

Security fix for the ALT Linux 10 package dotnet-aspnetcore-3.1 version 3.1.32-alt1

3.1.32-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 13, 2023 Vitaly Lipatov - ASP.NET Core 3.1.32 - CVE-2022-38013: .NET Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package dotnet-runtime-5.0 version 5.0.17-alt1

5.0.17-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 13, 2023 Vitaly Lipatov - new version 5.0.17 with rpmgs script - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 7.0.3-alt1

7.0.3-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 13, 2023 Vitaly Lipatov - .NET 7.0.1 - CVE-2023-21808: .NET Remote Code Execution Vulnerability - restore build and pack singlefilehost...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 7.0.3-alt1

7.0.3-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 13, 2023 Vitaly Lipatov - The .NET 7.0.3 and .NET SDK 7.0.103 releases - CVE-2023-21808: .NET Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.32-alt1

3.1.32-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 12, 2023 Vitaly Lipatov - .NET Core 3.1.32 and .NET Core SDK 3.1.426 releases - CVE-2022-41089: .NET Remote Code Execution Vulnerability - CVE-2022-41032: .NET Elevation of Privilege Vulnerability - CVE-2022-38013: .NET Denial o...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.17-alt1

5.0.17-alt1 built March 18, 2023 Vitaly Lipatov in task 316692 March 12, 2023 Vitaly Lipatov - new version 5.0.17 with rpmgs script - CVE-2022-29117: .NET Denial of Service Vulnerability - CVE-2022-29145: .NET Denial of Service Vulnerability - CVE-2022-23267: .NET Denial of Service Vulnerability...

.NET 7.0 Update - March 14, 2023 (KB5024672)

None None...

.NET 6.0 Update - Mar 14, 2023 (KB5024670)

None None...

The vulnerability of the Microsoft .NET Framework software platform, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft .NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...