Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64 to version 6.0.3 or higher. References - Dotnet Announceme...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 to version 6.0.3 or higher. References - Dotnet Announcement -...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet Issue...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm to version 6.0.3 or higher. References - Dotnet Announcement -...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 to version 6.0.3 or higher. References - Dotnet Announcement -...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 to version 6.0.3 or higher. References - Dotnet Announcement -...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.win-x86 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet Issue - Microsof...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.linux-arm64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet Issue -...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.android-x86 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet Issue -...

RHEL 9 : .NET 6.0 (RHSA-2022:6913)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6913 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. N...

CVE-2022-41032

A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...

dotnet: Nuget cache poisoning on Linux via world-writable cache directory

A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...

dotnet: Nuget cache poisoning on Linux via world-writable cache directory

A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...

dotnet: Nuget cache poisoning on Linux via world-writable cache directory

A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...

dotnet: Nuget cache poisoning on Linux via world-writable cache directory

A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...

dotnet: Nuget cache poisoning on Linux via world-writable cache directory

A vulnerability was found in dotnet. This flaw allows an attacker to triage a NuGet cache poisoning on Linux via a world-writable cache directory...

USN-5670-1 dotnet6 vulnerability

Edward Thomson discovered that .NET 6 incorrectly handled permissions for local NuGet cache. A local attacker could possibly use this issue to execute arbitrary code...

PT-2022-7017 · Microsoft +7 · Net Core 3.1 +9

Name of the Vulnerable Software and Affected Versions: - NuGet versions 6.3.0 and earlier - NuGet versions 6.2.1 and earlier - NuGet versions 6.0.2 and earlier - NuGet versions 5.11.2 and earlier - NuGet versions 5.9.2 and earlier - NuGet versions 5.7.2 and earlier - NuGet versions 4.9.5 and...

NuGet Client 安全漏洞

NuGet Client is the NuGet client tool. Includes Visual Studio extensions, command line tools, and msbuild support. A security vulnerability exists in NuGet Client. The following products and versions are affected: .NET 6.0, .NET Core 3.1,Microsoft Visual Studio 2019 version 16.11 includes 16.0 -...