CVE-2024-43485

.NET and Visual Studio Denial of Service Vulnerability...

CVE-2024-43484

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...

CVE-2024-43483

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability...

CVE-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

...

CVE-2024-43484 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

...

CVE-2024-43484

Summary of CVE-2024-43484 and related context : The connected documents corroborate a denial-of-service vulnerability affecting .NET/Visual Studio components, attributed to algorithmic complexity in both System.IO.Packaging (CVE-2024-43484) and related areas such as System.Text.Json (CVE-2024-434...

CVE-2024-43483

CVE-2024-43483 is a .NET/Dotnet Framework/Visual Studio Denial of Service vulnerability. Connected advisories confirm it involves algorithmic complexity/hash flooding issues in multiple .NET components, leading to potential DoS. Affected packages span .NET 6.0 and .NET 8.0 lines across distributi...

CVE-2024-43484 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

...

CVE-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

...

CVE-2024-43601 Visual Studio Code for Linux Remote Code Execution Vulnerability

...

CVE-2024-43601

CVE-2024-43601 affects Visual Studio Code for Linux, with a remote code execution vulnerability in VS Code 1.94.0 and earlier, linked to the elevated save flow. The root cause is a flaw in the save operation that can allow arbitrary code execution when processing saved data. Public details in con...

CVE-2024-43601 Visual Studio Code for Linux Remote Code Execution Vulnerability

...

CVE-2024-38229

CVE-2024-38229 describes a remote code execution vulnerability in .NET/Visual Studio caused by a race condition when closing an HTTP/3 stream, leading to use-after-free in affected components. Public references indicate impacted products include .NET and ASP.NET stack (including self-contained de...

CVE-2024-38229 .NET and Visual Studio Remote Code Execution Vulnerability

...

CVE-2024-38229

.NET and Visual Studio Remote Code Execution Vulnerability...

CVE-2024-43484

A flaw was found in dotnet. The System.IO.Packaging library may allow untrusted inputs to influence algorithmically complex operations, resulting in a denial of service. Mitigation Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a...

CVE-2024-43483

A flaw was found in dotnet. The System.Security.Cryptography.Cose, System.IO.Packaging and System.Runtime.Caching components may be exposed to hostile input, making them susceptible to hash flooding attacks, resulting in denial of service. Mitigation Red Hat has investigated whether a possible...

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

...

Visual Studio Collector Service Denial of Service Vulnerability

...

Visual Studio Code extension for Arduino Remote Code Execution Vulnerability

Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector...