dotnet: parsing HTML causes Denial of Service

A flaw was found in dotnet. The Microsoft Security Advisory describes the issue of the ASP.NET FormFeature.cs causing a denial of service when HTML forms are parsed...

CVE-2022-30130

.NET Framework Denial of Service Vulnerability...

CVE-2022-30130

.NET Framework Denial of Service Vulnerability...

CVE-2022-29145

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2022-29117

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2022-23267

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2022-23267 .NET and Visual Studio Denial of Service Vulnerability

...

CVE-2022-23267

A flaw was found in dotnet. The Microsoft Security Advisory describes the issue of the Apply MaxResponseHeadersLength limit for trailing headers to address a denial of service via excess memory allocations through the HttpClient...

CVE-2022-29145

A flaw was found in dotnet. The Microsoft Security Advisory describes the issue of the ASP.NET FormFeature.cs causing a denial of service when HTML forms are parsed...

PT-2022-4628

Name of the Vulnerable Software and Affected Versions .NET Core versions 3.1 through 3.1.24 .NET 5.0 versions 5.0 through 5.0.16 .NET 6.0 versions 6.0 through 6.0.4 Description The issue is related to incorrect cleanup or release of resources in Microsoft Visual Studio and the .NET Framework, whi...

Microsoft Visual Studio和Microsoft .NET资源管理错误漏洞

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...

PT-2022-4629

Name of the Vulnerable Software and Affected Versions .NET Core 3.1 versions prior to 3.1.25 .NET 5.0 versions prior to 5.0.17 .NET 6.0 versions prior to 6.0.5 Description The issue is related to a Denial of Service vulnerability in .NET and Visual Studio, where a malicious client can manipulate...

PT-2022-4630

Name of the Vulnerable Software and Affected Versions .NET Core 3.1 versions 3.1.0 through 3.1.24 .NET 5.0 versions 5.0.0 through 5.0.16 .NET 6.0 versions 6.0.0 through 6.0.4 Description The vulnerability is related to the incorrect cleanup or release of resources in Microsoft Visual Studio and t...

April 21, 2022-KB5012796 Cumulative Update Preview for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019

None None...

PHP ext/standard var_unserializer Heap Buffer Overflow DoS

The vulnerability of the ext/standard/varunserializer.c component of the PHP interpreter is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to cause service failures by invoking the com, dotnet, or variant classes...

.NET 5.0 on Rocky Linux 8 bugfix update

An update is available for dotnet5.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

CVE-2022-26907

Azure SDK for .NET Information Disclosure Vulnerability...

CVE-2022-26832

.NET Framework Denial of Service Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.15-alt1

April 2, 2022 Vitaly Lipatov 5.0.15-alt1 - The .NET 5.0.15 and .NET 5.0.406 SDK releases - CVE-2022-24464 : .NET Denial of Service Vulnerability - CVE-2022-24512 : .NET Remote Code Execution Vulnerability - CVE-2020-8927 : .NET Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-runtime-5.0 version 5.0.15-alt1

April 2, 2022 Vitaly Lipatov 5.0.15-alt1 - new version 5.0.15 with rpmgs script - CVE-2022-24464 : .NET Denial of Service Vulnerability - CVE-2022-24512 : .NET Remote Code Execution Vulnerability - CVE-2020-8927 : .NET Remote Code Execution Vulnerability...