ASP.NET and Visual Studio Security Feature Bypass Vulnerability
ASP.NET and Visual Studio Security Feature Bypass Vulnerability
- Update to 6.0.120-0ubuntu1~22.04.1
PatchFirst · Latest vulnerabilities
Vulnerabilities published for dotnet6 in the last 30 days: 27. Listed in the KEV catalogue: 1.
Vulnerabilities: 90
ASP.NET and Visual Studio Security Feature Bypass Vulnerability
USN-6161-1 fixed vulnerabilities in .NET. The update introduced a regression with regards to how the runtime imported X.509 certificates. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that .NET did not properly enforce certain restrictions when deserializing a DataSet or DataTable from XML. An attacker could possibly use this issue to elevate their privileges. (CVE-2023-24936) Kevin Jones discovered that .NET did not properly handle the AIA fetching process for X.509 client certificates. An attacker could possibly use this issue to cause a denial of service. (CVE-20
NuGet Client Remote Code Execution Vulnerability
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
.NET DLL Hijacking Remote Code Execution Vulnerability
.NET Denial of Service Vulnerability
NuGet Client Elevation of Privilege Vulnerability
.NET Core and Visual Studio Denial of Service Vulnerability
Check your installed stack and versions against the current vulnerability feeds.