Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.linux-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.linux-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttlin...

Allocation of Resources Without Limits or Throttling

Overview Microsoft.AspNetCore.App.Runtime.linux-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the ReceiveFromAsync process when a SocketAsyncEventArgs instance is reused across IPv4 and IPv6 datagram sockets, which can retain an undersized cached native address buffer. An attacker can achieve remote code...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the ReceiveFromAsync process when a SocketAsyncEventArgs instance is reused across IPv4 and IPv6 datagram sockets, which can retain an undersized cached native address buffer. An attacker can achieve remote code...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the ReceiveFromAsync process when a SocketAsyncEventArgs instance is reused across IPv4 and IPv6 datagram sockets, which can retain an undersized cached native address buffer. An attacker can achieve remote code...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the ReceiveFromAsync process when a SocketAsyncEventArgs instance is reused across IPv4 and IPv6 datagram sockets, which can retain an undersized cached native address buffer. An attacker can achieve remote code...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML data due to inefficient algorithmic complexity in the System.Security.Cryptography.Xml and System.Private.Xml components. An attacker can cause excessive resource...

Arbitrary Code Injection

Overview Microsoft.AspNetCore.Components.WebAssembly.Server is a runtime server features for ASP.NET Core Blazor applications that have a client running under WebAssembly. Affected versions of this package are vulnerable to Arbitrary Code Injection in the Blazor WebAssembly debug proxy when...

Asymmetric Resource Consumption (Amplification)

Overview Affected versions of this package are vulnerable to Asymmetric Resource Consumption Amplification through the processing of signed XML data, where input-depth and operation-count limits are not properly enforced, DTD processing is not prohibited by default, and entity references and...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the DateTime Hebrew-number parsing process. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that leads to reading outside the expected stack bounds. Remediation...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the DateTime Hebrew-number parsing process. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that leads to reading outside the expected stack bounds. Remediation...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the DateTime Hebrew-number parsing process. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that leads to reading outside the expected stack bounds. Remediation...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the DateTime Hebrew-number parsing process. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that leads to reading outside the expected stack bounds. Remediation...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the DateTime Hebrew-number parsing process. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that leads to reading outside the expected stack bounds. Remediation...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the DateTime Hebrew-number parsing process. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that leads to reading outside the expected stack bounds. Remediation...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the DateTime Hebrew-number parsing process. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that leads to reading outside the expected stack bounds. Remediation...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the DateTime Hebrew-number parsing process. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that leads to reading outside the expected stack bounds. Remediation...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the DateTime Hebrew-number parsing process. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that leads to reading outside the expected stack bounds. Remediation...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the DateTime Hebrew-number parsing process. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that leads to reading outside the expected stack bounds. Remediation...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the DateTime Hebrew-number parsing process. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that leads to reading outside the expected stack bounds. Remediation...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the DateTime Hebrew-number parsing process. An attacker can cause the application to terminate unexpectedly by providing specially crafted input that leads to reading outside the expected stack bounds. Remediation...

Improperly Controlled Sequential Memory Allocation

Overview Microsoft.AspNetCore.SignalR.Protocols.MessagePack is a SignalR Hub Protocol over MsgPack. Affected versions of this package are vulnerable to Improperly Controlled Sequential Memory Allocation in the deserialization process. An attacker can cause excessive memory consumption and disrupt...

Asymmetric Resource Consumption

Overview Affected versions of this package are vulnerable to Asymmetric Resource Consumption in the EnvelopedCms.Decode method, which performs quadratic work while processing the attributes of a CMS or PKCS7 message. An attacker can exhaust CPU on the host before any authentication step by...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the processing of signed XML documents due to inefficient algorithmic complexity in the handling of certain XML structures. An attacker can cause excessive resource consumption and disrupt service...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the SignedCms.CheckSignature method, which reparses the X.509 data carried in the message rather than parsing it once, so the work grows quadratically with the number of embedded certificates. An...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...