151 matches found
dotnet: Nuget cache poisoning on Linux via world-writable cache directory
A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...
dotnet: NuGet Credential leak due to loss of control of third party symbol server domain
.NET and Visual Studio Information Disclosure Vulnerability...
dotnet: malicious content causes high CPU and memory usage
A flaw was found in dotnet. The Microsoft Security Advisory describes the issue of a malicious client that can send MyCookie=chunks-2147483647 without the actual cookie chunks, causing large allocations, exceptions, and excess CPU utilization on the server when it tries to read or delete that man...
CVE-2022-23267 .NET and Visual Studio Denial of Service Vulnerability
...
dotnet: double parser stack buffer overrun
A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise...
dotnet: double parser stack buffer overrun
A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise...
CVE-2022-24464 .NET and Visual Studio Denial of Service Vulnerability
...
dotnet: .NET Core single-file application privilege escalation
A flaw was found in dotnet. A .NET Core single-file application running with elevated permissions could allow an attacker to gain elevated privileges. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability...
dotnet: System.Text.Encodings.Web Remote Code Execution
A remote code execution vulnerability was found in dotnet in the System.Text.Encodings.Web package, caused by a buffer overrun. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...
Denial Of Service (DoS)
dotnet is vulnerable to denial of service. An improper handling of web requests allows a remote attacker to crash the application...
dotnet: NuGet Tampering Vulnerability
A flaw was found in dotnet. A tampering vulnerability exists in NuGet software when executed in a Linux or Mac environment. An attacker who successfully exploits the vulnerability could run arbitrary code in the context of the current user. The highest threat from this vulnerability is to data...