dotnet: double parser stack buffer overrun

A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise...

dotnet: ASP.NET Denial of Service via FormPipeReader

A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service...

dotnet: ASP.NET Denial of Service via FormPipeReader

A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service...

dotnet: double parser stack buffer overrun

A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise...

dotnet: double parser stack buffer overrun

A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise...

dotnet: ASP.NET Denial of Service via FormPipeReader

A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service...

dotnet: double parser stack buffer overrun

A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise...

dotnet: ASP.NET Denial of Service via FormPipeReader

A flaw was found in .NET Core, related to the FormPipeReader. This issue allows remote unauthenticated attackers to cause a denial of service...

CVE-2022-24464

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2022-24512 .NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2022-24464 .NET and Visual Studio Denial of Service Vulnerability

...

CVE-2022-24512

A flaw was found in dotnet, where a buffer overrun exists in the double parse routine, which could lead to remote code execution. This flaw allows an attacker to execute code remotely on the system, leading to some system compromise...

PT-2022-4631

Name of the Vulnerable Software and Affected Versions .NET 6.0 versions 6.0.0 through 6.0.2 .NET 5.0 versions 5.0.0 through 5.0.14 .NET Core 3.1 versions 3.1.0 through 3.1.22 Description The issue is related to incorrect clearing or release of resources, which can be exploited by a remote attacke...

Microsoft .NET Core和Microsoft Visual Studio 输入验证错误漏洞

Microsoft Visual Studio and Microsoft .NET Core are both products of Microsoft Corporation. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

PT-2022-4632

Name of the Vulnerable Software and Affected Versions .NET versions prior to 6.0.3 .NET 5.0 versions prior to 5.0.15 .NET Core 3.1 versions prior to 3.1.23 Description The issue is related to a buffer overflow due to unchecked input data, which can allow a remote attacker to execute arbitrary cod...

Microsoft .NET Core和Microsoft Visual Studio 代码注入漏洞

Microsoft Visual Studio and Microsoft .NET Core are both products of Microsoft Corporation. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

Chinese APT group targets financial institutions in the campaign “Operation Cache Panda”

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Chinese threat actor APT10 conducted a series of large-scale supply chain attacks that exclusively targeted the financial software systems of Taiwanese financial institutions from the end of November 2021 until the middle of...

Security fix for the ALT Linux 10 package dotnet-aspnetcore-3.1 version 3.1.22-alt1

3.1.22-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - .NET Core 3.1.22 - December 14, 2021 - CVE-2021-43877: ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-34532: ASP.NET Core Information Disclosure Vulnerability...

Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.22-alt1

3.1.22-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - new version 3.1.22 with rpmgs script - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.22-alt1

3.1.22-alt1 built Feb. 21, 2022 Vitaly Lipatov in task 295271 Feb. 12, 2022 Vitaly Lipatov - .NET Core 3.1.22 - December 14, 2021 - CVE-2021-43877: ASP.NET Core Elevation of privilege Vulnerability - CVE-2021-34485: .NET Core Information Disclosure Vulnerability - CVE-2021-26423: .NET Core Denial...