3896 matches found
USN-5798-1 dotnet6 vulnerability
Johan Gorter discovered that .NET 6 incorrectly processed certain invalid HTTP requests. An attacker could possibly use this issue to cause a denial of service condition for an exposed endpoint...
USN-5798-1: .NET 6 vulnerability
Johan Gorter discovered that .NET 6 incorrectly processed certain invalid HTTP requests. An attacker could possibly use this issue to cause a denial of service condition for an exposed endpoint...
CVE-2023-21538
A vulnerability was found in dotnet. This flaw occurs when parsing an empty HTTP response as a JSON.NET JObject that causes a stack overflow and crashes a process...
PT-2023-9612 · Microsoft +7 · .Net Framework +7
Name of the Vulnerable Software and Affected Versions: Microsoft .NET affected versions not specified Description: The issue is related to flaws in the deserialization mechanism of the Microsoft .NET platform. It allows a remote attacker to cause a denial of service. Recommendations: At the momen...
Microsoft .NET 安全漏洞
Microsoft .NET is a software framework from Microsoft Corporation USA dedicated to agile software development, rapid application development, platform-agnosticism, and web transparency. A security vulnerability exists in Microsoft . An attacker has exploited the vulnerability to cause a denial of...
.NET 7.0 Update - January 10, 2023 (KB5022545)
None None...
DotDumper - An Automatic Unpacker And Logger For DotNet Framework Targeting Files
An automatic unpacker and logger for DotNet Framework targeting files! This tool has been unveiled at Black Hat USA 2022. The automatic detection and classification of any given file in a reliable manner is often considered the holy grail of malware analysis. The trials and tribulations to get...
Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 6.0.12-alt1
Dec. 27, 2022 Vitaly Lipatov 6.0.12-alt1 - new version 6.0.12 with rpmrb script - CVE-2022-41032: .NET Elevation of Privilege Vulnerability - CVE-2022-38013: .NET Denial of Service Vulnerability - CVE-2022-34716: .NET Information Disclosure Vulnerability...
The vulnerability of Microsoft .NET Core, .NET Framework, and .NET software platforms lies in insufficient validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft .NET Core, .NET Framework, and .NET software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially created data...
CVE-2022-41089
.NET Framework Remote Code Execution Vulnerability...
PT-2022-5878 · Microsoft +1 · Net +3
Name of the Vulnerable Software and Affected Versions: .NET Framework affected versions not specified .NET Core affected versions not specified .NET affected versions not specified Description: The issue is related to insufficient input validation in the .NET Framework, .NET Core, and .NET...
dotnet7.0 security, bug fix, and enhancement update
7.0.100-0.5.rc2.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.100-0.5.rc2 - Add lldb as a build dependency - Related: RHBZ2134641 7.0.100-0.4.rc2 - Enable ppc64le builds - Related: RHBZ2134641 7.0.100-0.3.rc2 - Update to .NET 7 RC 2 -...
[SECURITY] Fedora 37 Update: dotnet6.0-6.0.110-2.fc37
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...
dotnet7.0 security, bug fix, and enhancement update
7.0.100-0.4.rc2.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.100-0.4.rc2 - Enable ppc64le builds - Related: RHBZ2134642 7.0.100-0.3.rc2 - Update to .NET 7 RC 2 - Resolves: RHBZ2134642...
dotnet: Nuget cache poisoning on Linux via world-writable cache directory
A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...
Moderate: dotnet7.0 security, bug fix, and enhancement update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.100 RC 2 and .NET Runtime 7.0.0 R...
AlmaLinux 8 : dotnet7.0 (ALSA-2022:7826)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7826 advisory. - NuGet Client Elevation of Privilege Vulnerability. CVE-2022-41032 Note that Nessus has not tested for this issue but has instead relied only on the application's...
[SECURITY] Fedora 36 Update: dotnet6.0-6.0.110-2.fc36
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...