CVE-2025-21172

CVE-2025-21172 is a Microsoft .NET/Visual Studio remote code execution vulnerability. The linked CVE record notes the root cause as an integer overflow and a heap-based overflow in msdia140.dll, yielding a high-impact remote code execution scenario over network; exploitation status is not detaile...

CVE-2025-21172 .NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2025-21172 .NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2025-21172

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2025-21173

CVE-2025-21173 is a .NET Elevation of Privilege vulnerability. Confirmed remediation in connected sources: update to .NET/ASP.NET packages for dotnet8.0, specifically runtime/sdk updates (example: .NET Runtime 8.0.1.12 and related 8.0.x builds) as part of the dotnet8.0 security updates. Amazon Li...

CVE-2025-21173 .NET Elevation of Privilege Vulnerability

...

CVE-2025-21173 .NET Elevation of Privilege Vulnerability

...

CVE-2025-21173

.NET Elevation of Privilege Vulnerability...

CVE-2025-21171 .NET Remote Code Execution Vulnerability

...

CVE-2025-21171

.NET Remote Code Execution Vulnerability...

.NET Elevation of Privilege Vulnerability

...

PT-2025-1153

Name of the Vulnerable Software and Affected Versions Microsoft .NET affected versions not specified Microsoft Visual Studio affected versions not specified Description The issue is related to a buffer overflow in dynamic memory, which can be exploited by a remote attacker to execute arbitrary...

CVE-2024-56717

CVE-2024-56717 affects the Linux kernel, specifically the net: mscc: ocelot driver. The vulnerability stems from an incorrect IFH SRC_PORT field in ocelot_ifh_set_basic(), where the code called with BIT_ULL(x) instead of the port index x. This caused the SRC_PORT to not correspond to the CPU port...

CVE-2024-53124 net: fix data-races around sk->sk_forward_alloc

In the Linux kernel, the following vulnerability has been resolved: net: fix data-races around sk-skforwardalloc Syzkaller reported this warning: ------------ cut here ------------ WARNING: CPU: 0 PID: 16 at net/ipv4/afinet.c:156 inetsockdestruct+0x1c5/0x1e0 Modules linked in: CPU: 0 UID: 0 PID: ...

CVE-2024-50258

In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gsomaxsize/gsoipv4maxsize Config a small gsomaxsize/gsoipv4maxsize will lead to an underflow in skdstgsomaxsize, which may trigger a BUGON crash, because sk-skgsomaxsize would be much bigger than...

CVE-2024-50297

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts Enqueue packets in dql after dma engine starts causes race condition. Tx transfer starts once dma engine is started and may execute dql dequeue in completion...

CVE-2024-50276

In the Linux kernel, the following vulnerability has been resolved: net: vertexcom: mse102x: Fix possible double free of TX skb The scope of the TX skb is wider than just mse102xtxframespi, so in case the TX skb room needs to be expanded, we should free the the temporary skb instead of the origin...

Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter was updated from version 1.0.1 to 1.0.8: Security issues fixed: CVE-2023-3978: Fixed security bug in x/net dependency in version 1.0.2 bsc1213933 Bugs fixed: Require Go 1.20 when building for RedHat derivatives Versio...

GHSA-8RXM-6783-QH55 Duplicate Advisory: .NET and Visual Studio Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6x36-qxmj-rv4p. This link is maintained to preserve external references. Original Description .NET and Visual Studio Remote Code Execution Vulnerability...

kernel: net: missing check virtio

In the Linux kernel, the following vulnerability has been resolved: net: missing check virtio Two missing check in virtionethdrtoskb allowed syzbot to crash kernels again 1. After the skbsegment function the buffer may become non-linear nrfrags != 0, but since the SKBTXSHAREDFRAG flag is not set...