3896 matches found
[SECURITY] Fedora 38 Update: dotnet7.0-7.0.116-1.fc38
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...
[SECURITY] Fedora 39 Update: dotnet7.0-7.0.116-1.fc39
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...
Fedora 38 : dotnet7.0 (2024-04b568cd49)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-04b568cd49 advisory. This is the February 2024 update for .NET 7. Release Notes: - Runtime: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.16/7.0.16.md - SDK:...
Fedora 39 : dotnet7.0 (2024-a66f05d20f)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-a66f05d20f advisory. This is the February 2024 update for .NET 7. Release Notes: - Runtime: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.16/7.0.16.md - SDK:...
dotnet: Denial of Service in X509Certificate2
A denial of service vulnerability exists in .NET applications with OpenSSL support when parsing X509 certificates. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing specially crafte...
dotnet: Denial of Service in X509Certificate2
A denial of service vulnerability exists in .NET applications with OpenSSL support when parsing X509 certificates. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing specially crafte...
dotnet6.0 security update
6.0.127-1.0.1 - Update to .NET SDK 6.0.127 and Runtime 6.0.27...
dotnet7.0 security update
7.0.116-1.0.1 - Update to .NET SDK 7.0.116 and Runtime 7.0.16...
dotnet6.0 security update
6.0.127-1.0.1 - Update to .NET SDK 6.0.127 and Runtime 6.0.27...
USN-6634-1 dotnet6, dotnet7, dotnet8 vulnerabilities
Brennan Conroy discovered that .NET with SignalR did not properly handle malicious clients. An attacker could possibly use this issue to cause a denial of service. CVE-2024-21386 Bahaa Naamneh discovered that .NET with OpenSSL support did not properly parse X509 certificates. An attacker could...
GHSA-68W7-72JG-6QPP vulnerabilities
Vulnerabilities for packages: dotnet...
GHSA-68W7-72JG-6QPP vulnerabilities
Vulnerabilities for packages: dotnet...
Denial of Service (DoS)
Overview Microsoft.AspNetCore.App.Runtime.linux-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS when parsing X509 certificates...
Denial of Service (DoS)
Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS when parsing X509...
dotnet: Denial of Service in SignalR server
A denial of service vulnerability is present in the .NET applications utilizing SignalR, which a malicious client can exploit. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing...
dotnet: Denial of Service in X509Certificate2
A denial of service vulnerability exists in .NET applications with OpenSSL support when parsing X509 certificates. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing specially crafte...
Important: Red Hat Security Advisory: dotnet7.0 security update
An update for dotnet7.0 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
dotnet: Denial of Service in SignalR server
A denial of service vulnerability is present in the .NET applications utilizing SignalR, which a malicious client can exploit. The issue arises from inadequate validation of user-supplied input in .NET. This flaw allows a remote attacker to trigger a denial of service DoS attack by providing...
