apk package
chainguard/dotnet-7
pkg:apk/chainguard/dotnet-7
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-21319 | — | < 7.0.120-r1 | 7.0.120-r1 | Jan 9, 2024 | Microsoft Identity Denial of service vulnerability | ||
| CVE-2024-0057 | — | < 7.0.116-r0 | 7.0.116-r0 | Jan 9, 2024 | NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability | ||
| CVE-2023-44487 | Hig | 7.5 | KEV | < 7.0.112-r0 | 7.0.112-r0 | Oct 10, 2023 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
| CVE-2023-28260 | — | < 7.0.105-r0 | 7.0.105-r0 | Apr 11, 2023 | .NET DLL Hijacking Remote Code Execution Vulnerability |
- CVE-2024-21319Jan 9, 2024affected < 7.0.120-r1fixed 7.0.120-r1
Microsoft Identity Denial of service vulnerability
- CVE-2024-0057Jan 9, 2024affected < 7.0.116-r0fixed 7.0.116-r0
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
- affected < 7.0.112-r0fixed 7.0.112-r0
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
- CVE-2023-28260Apr 11, 2023affected < 7.0.105-r0fixed 7.0.105-r0
.NET DLL Hijacking Remote Code Execution Vulnerability