Search CVE reports
1 – 10 of 46 results
Some fixes available 6 of 8
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet10, dotnet11
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dotnet6 | Not in release | Not in release | Vulnerable | Not in release | Not in release |
| dotnet7 | Not in release | Not in release | Ignored | Not in release | Not in release |
| dotnet8 | Not in release | Fixed | Fixed | Not in release | Not in release |
| dotnet10 | Fixed | Fixed | Not in release | Not in release | Not in release |
| dotnet11 | Not in release | Not in release | Not in release | Not in release | Not in release |
Some fixes available 6 of 8
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet10, dotnet11
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dotnet6 | Not in release | Not in release | Vulnerable | Not in release | Not in release |
| dotnet7 | Not in release | Not in release | Ignored | Not in release | Not in release |
| dotnet8 | Not in release | Fixed | Fixed | Not in release | Not in release |
| dotnet10 | Fixed | Fixed | Not in release | Not in release | Not in release |
| dotnet11 | Not in release | Not in release | Not in release | Not in release | Not in release |
Some fixes available 6 of 8
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet10, dotnet11
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dotnet6 | Not in release | Not in release | Vulnerable | Not in release | Not in release |
| dotnet7 | Not in release | Not in release | Ignored | Not in release | Not in release |
| dotnet8 | Not in release | Fixed | Fixed | Not in release | Not in release |
| dotnet10 | Fixed | Fixed | Not in release | Not in release | Not in release |
| dotnet11 | Not in release | Not in release | Not in release | Not in release | Not in release |
Some fixes available 4 of 5
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet10, dotnet11
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dotnet6 | Not in release | Not in release | Not affected | Not in release | Not in release |
| dotnet7 | Not in release | Not in release | Ignored | Not in release | Not in release |
| dotnet8 | Not in release | Not affected | Not affected | Not in release | Not in release |
| dotnet10 | Fixed | Fixed | Not in release | Not in release | Not in release |
| dotnet11 | Not in release | Not in release | Not in release | Not in release | Not in release |
Some fixes available 6 of 8
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet10, dotnet11
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dotnet6 | Not in release | Not in release | Vulnerable | Not in release | Not in release |
| dotnet7 | Not in release | Not in release | Ignored | Not in release | Not in release |
| dotnet8 | Not in release | Fixed | Fixed | Not in release | Not in release |
| dotnet10 | Fixed | Fixed | Not in release | Not in release | Not in release |
| dotnet11 | Not in release | Not in release | Not in release | Not in release | Not in release |
Some fixes available 5 of 7
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet10, dotnet11
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dotnet6 | Not in release | Not in release | Vulnerable | Not in release | Not in release |
| dotnet7 | Not in release | Not in release | Ignored | Not in release | Not in release |
| dotnet8 | Not in release | Fixed | Fixed | Not in release | Not in release |
| dotnet10 | Fixed | Fixed | Not in release | Not in release | Not in release |
| dotnet11 | Not in release | Not in release | Not in release | Not in release | Not in release |
Some fixes available 6 of 8
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet10, dotnet11
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dotnet6 | Not in release | Not in release | Vulnerable | Not in release | Not in release |
| dotnet7 | Not in release | Not in release | Ignored | Not in release | Not in release |
| dotnet8 | Not in release | Fixed | Fixed | Not in release | Not in release |
| dotnet10 | Fixed | Fixed | Not in release | Not in release | Not in release |
| dotnet11 | Not in release | Not in release | Not in release | Not in release | Not in release |
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet10, dotnet11
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dotnet6 | Not in release | Not in release | Not affected | Not in release | Not in release |
| dotnet7 | Not in release | Not in release | Ignored | Not in release | Not in release |
| dotnet8 | Not in release | Not affected | Not affected | Not in release | Not in release |
| dotnet10 | Not affected | Not affected | Not in release | Not in release | Not in release |
| dotnet11 | Not in release | Not in release | Not in release | Not in release | Not in release |
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet10, dotnet11
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dotnet6 | Not in release | Not in release | Not affected | Not in release | Not in release |
| dotnet7 | Not in release | Not in release | Ignored | Not in release | Not in release |
| dotnet8 | Not in release | Not affected | Not affected | Not in release | Not in release |
| dotnet10 | Not affected | Not affected | Not in release | Not in release | Not in release |
| dotnet11 | Not in release | Not in release | Not in release | Not in release | Not in release |
Some fixes available 6 of 8
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.
5 affected packages
dotnet6, dotnet7, dotnet8, dotnet10, dotnet11
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| dotnet6 | Not in release | Not in release | Vulnerable | Not in release | Not in release |
| dotnet7 | Not in release | Not in release | Ignored | Not in release | Not in release |
| dotnet8 | Not in release | Fixed | Fixed | Not in release | Not in release |
| dotnet10 | Fixed | Fixed | Not in release | Not in release | Not in release |
| dotnet11 | Not in release | Not in release | Not in release | Not in release | Not in release |