p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de dotnet7 · Página 7

Vulnerabilidades publicadas para dotnet7 en los últimos 30 días: 48. Incluidas en el catálogo KEV: 1.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 140

  1. CVE-2023-44487

    Alta · CVSS 7.5EPSS 100%En el catálogo KEVCódigo de explotación públicoCorrección disponible

    CVE-2023-44487

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

    • Actualiza a 7.0.112-0ubuntu1~22.04.1
    Publicación Actualización
  2. USN-6161-2

    Sin evaluarCorrección disponible

    dotnet6, dotnet7 regression

    USN-6161-1 fixed vulnerabilities in .NET. The update introduced a regression with regards to how the runtime imported X.509 certificates. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that .NET did not properly enforce certain restrictions when deserializing a DataSet or DataTable from XML. An attacker could possibly use this issue to elevate their privileges. (CVE-2023-24936) Kevin Jones discovered that .NET did not properly handle the AIA fetching process for X.509 client certificates. An attacker could possibly use this issue to cause a denial of service. (CVE-20

    • Actualiza a 7.0.108-0ubuntu1~22.04.1
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →