CVE-2020-16937

An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an affected system's memory. To exploit the vulnerability, an authenticated attacker would need to run a...

Microsoft .NET Framework Information Disclosure Vulnerability (CNVD-2020-62332)

Microsoft .NET Framework is a comprehensive and consistent programming model from Microsoft Corporation USA and a Windows Store, Windows Phone, Windows Server, and Microsoft Azure applications. The platform includes the C and Visual Basic programming languages, a public language runtime library,...

October 1, 2020-KB4576945 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10, version 2004 and Windows Server, version 2004

None None...

September 16, 2020-KB4577324 Cumulative Update Preview for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019

None None...

Fedora 32 : dotnet-build-reference-packages / dotnet3.1 (2020-cad5d17c6d)

Update to .NET Core SDK 3.1.107 and Runtime 3.1.7. This fixes CVE-2020-1597 - Release Notes: https://github.com/dotnet/core/blob/master/release-notes /3.1/3.1.7/3.1.7.md Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Fedora: Security Advisory for dotnet-build-reference-packages (FEDORA-2020-cad5d17c6d)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: dotnet-build-reference-packages-0-5.20200608git1b1a695.fc32

This contains references packages used for building .NET Core. This is not meant to be used by end-users...

The vulnerability of the Microsoft .NET Framework software lies in its lack of proper input validation, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software exists due to insufficient testing of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file from a remote location...

August 20, 2020-KB4570723 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 1903, Windows Server 1903 RTM, Windows 10, version 1909 and Windows Server, version 1909

None None...

Denial Of Service (DoS)

dotnet is vulnerable to denial of service. An attacker is able to cause excessive resource consumption which would eventually lead to an application crash...

Security fix for the ALT Linux 9 package dotnet-coreclr-3.1 version 3.1.6-alt1

Aug. 3, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.6-alt1

Aug. 3, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-6.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

OSV-2020-1474 Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ 8 Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1464 Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ 12 Crash state: dotnetparsecom dotnetload yrmodulesload...