Fedora: Security Advisory for dotnet-build-reference-packages (FEDORA-2020-cad5d17c6d)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: dotnet-build-reference-packages-0-5.20200608git1b1a695.fc32

This contains references packages used for building .NET Core. This is not meant to be used by end-users...

The vulnerability of the Microsoft .NET Framework software lies in its lack of proper input validation, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software exists due to insufficient testing of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file from a remote location...

August 20, 2020-KB4570723 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 Version 1903, Windows Server 1903 RTM, Windows 10, version 1909 and Windows Server, version 1909

None None...

Denial Of Service (DoS)

dotnet is vulnerable to denial of service. An attacker is able to cause excessive resource consumption which would eventually lead to an application crash...

Security fix for the ALT Linux 9 package dotnet-coreclr-3.1 version 3.1.6-alt1

Aug. 3, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-coreclr-3.1 version 3.1.6-alt1

Aug. 3, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-6.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 3.1.6-alt1

Aug. 2, 2020 Vitaly Lipatov 3.1.6-alt1 - new version 3.1.6 with rpmrb script ALT bug 38744 - .NET Core 3.1.6 - July 14, 2020 - CVE-2020-1108: .NET Core Denial of Service Vulnerability - CVE-2020-1147: NET Core Remote Code Execution Vulnerability...

OSV-2020-1474 Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ 8 Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1464 Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ 12 Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1436 Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ 4 Crash state: dotnetparsecom dotnetload yrmodulesload...

dotnet: XML source markup processing remote code execution

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...

The vulnerability of the Microsoft .NET Framework software platform, Microsoft Visual Studio for software development, and Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server packages, related to errors in processing XML requests, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software platform, as well as the Microsoft Visual Studio development tools, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server, is related to errors in processing XML requests. Exploiting this vulnerability allows a malicious...

dotnet: XML source markup processing remote code execution

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...

dotnet: XML source markup processing remote code execution

It was discovered that .NET Core did not properly check the source markup of XML files. A remote, unauthenticated attacker could possibly exploit this flaw to execute arbitrary code by sending specially crafted requests to an application parsing certain kinds of XML files or an ASP.NET Core...