rpm package

almalinux/dotnet

pkg:rpm/almalinux/dotnet

Vulnerabilities (76)

CVE	Sev	CVSS	KEV	Affected versions	Fixed in	Published	Description
CVE-2024-43485	Hig	7.5		< 8.0.110-1.el8_10	8.0.110-1.el8_10	Oct 8, 2024	.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-43484	Hig	7.5		< 8.0.110-1.el8_10	8.0.110-1.el8_10	Oct 8, 2024	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-43483	Hig	7.5		< 8.0.110-1.el8_10	8.0.110-1.el8_10	Oct 8, 2024	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-38229	Hig	8.1		< 8.0.110-1.el8_10	8.0.110-1.el8_10	Oct 8, 2024	.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-38167	Med	6.5		< 8.0.108-1.el8_10	8.0.108-1.el8_10	Aug 13, 2024	.NET and Visual Studio Information Disclosure Vulnerability
CVE-2024-38095	Hig	7.5		< 8.0.107-1.el8_10	8.0.107-1.el8_10	Jul 9, 2024	.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-35264	Hig	8.1		< 8.0.107-1.el8_10	8.0.107-1.el8_10	Jul 9, 2024	.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-30105	Hig	7.5		< 8.0.107-1.el8_10	8.0.107-1.el8_10	Jul 9, 2024	.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-30046	Med	5.9		< 8.0.105-1.el8_10	8.0.105-1.el8_10	May 14, 2024	Visual Studio Denial of Service Vulnerability
CVE-2024-30045	Med	6.3		< 8.0.105-1.el8_10	8.0.105-1.el8_10	May 14, 2024	.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-21392	Hig	7.5		< 8.0.103-1.el8_9	8.0.103-1.el8_9	Mar 12, 2024	.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-21404	Hig	7.5		< 8.0.102-2.el8_9	8.0.102-2.el8_9	Feb 13, 2024	.NET Denial of Service Vulnerability
CVE-2024-21386	Hig	7.5		< 8.0.102-2.el8_9	8.0.102-2.el8_9	Feb 13, 2024	.NET Denial of Service Vulnerability
CVE-2024-21319	Med	6.8		< 8.0.101-1.el8_9	8.0.101-1.el8_9	Jan 9, 2024	Microsoft Identity Denial of service vulnerability
CVE-2024-0057	Cri	9.1		< 8.0.101-1.el8_9	8.0.101-1.el8_9	Jan 9, 2024	NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
CVE-2024-0056	Hig	8.7		< 8.0.101-1.el8_9	8.0.101-1.el8_9	Jan 9, 2024	Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
CVE-2023-36558	Med	6.2		< 8.0.100-2.el8_9	8.0.100-2.el8_9	Nov 14, 2023	ASP.NET Core Security Feature Bypass Vulnerability
CVE-2023-36049	Hig	7.6		< 8.0.100-2.el8_9	8.0.100-2.el8_9	Nov 14, 2023	.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-44487	Hig	7.5	KEV	< 7.0.112-1.el8_8	7.0.112-1.el8_8	Oct 10, 2023	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-36799	Med	6.5		< 7.0.111-1.el8_8	7.0.111-1.el8_8	Sep 12, 2023	.NET Core and Visual Studio Denial of Service Vulnerability

CVE-2024-43485HigOct 8, 2024
affected < 8.0.110-1.el8_10fixed 8.0.110-1.el8_10
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-43484HigOct 8, 2024
affected < 8.0.110-1.el8_10fixed 8.0.110-1.el8_10
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-43483HigOct 8, 2024
affected < 8.0.110-1.el8_10fixed 8.0.110-1.el8_10
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-38229HigOct 8, 2024
affected < 8.0.110-1.el8_10fixed 8.0.110-1.el8_10
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-38167MedAug 13, 2024
affected < 8.0.108-1.el8_10fixed 8.0.108-1.el8_10
.NET and Visual Studio Information Disclosure Vulnerability
CVE-2024-38095HigJul 9, 2024
affected < 8.0.107-1.el8_10fixed 8.0.107-1.el8_10
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-35264HigJul 9, 2024
affected < 8.0.107-1.el8_10fixed 8.0.107-1.el8_10
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-30105HigJul 9, 2024
affected < 8.0.107-1.el8_10fixed 8.0.107-1.el8_10
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-30046MedMay 14, 2024
affected < 8.0.105-1.el8_10fixed 8.0.105-1.el8_10
Visual Studio Denial of Service Vulnerability
CVE-2024-30045MedMay 14, 2024
affected < 8.0.105-1.el8_10fixed 8.0.105-1.el8_10
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-21392HigMar 12, 2024
affected < 8.0.103-1.el8_9fixed 8.0.103-1.el8_9
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-21404HigFeb 13, 2024
affected < 8.0.102-2.el8_9fixed 8.0.102-2.el8_9
.NET Denial of Service Vulnerability
CVE-2024-21386HigFeb 13, 2024
affected < 8.0.102-2.el8_9fixed 8.0.102-2.el8_9
.NET Denial of Service Vulnerability
CVE-2024-21319MedJan 9, 2024
affected < 8.0.101-1.el8_9fixed 8.0.101-1.el8_9
Microsoft Identity Denial of service vulnerability
CVE-2024-0057CriJan 9, 2024
affected < 8.0.101-1.el8_9fixed 8.0.101-1.el8_9
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
CVE-2024-0056HigJan 9, 2024
affected < 8.0.101-1.el8_9fixed 8.0.101-1.el8_9
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
CVE-2023-36558MedNov 14, 2023
affected < 8.0.100-2.el8_9fixed 8.0.100-2.el8_9
ASP.NET Core Security Feature Bypass Vulnerability
CVE-2023-36049HigNov 14, 2023
affected < 8.0.100-2.el8_9fixed 8.0.100-2.el8_9
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-44487HigKEVOct 10, 2023
affected < 7.0.112-1.el8_8fixed 7.0.112-1.el8_8
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-36799MedSep 12, 2023
affected < 7.0.111-1.el8_8fixed 7.0.111-1.el8_8
.NET Core and Visual Studio Denial of Service Vulnerability

Page 3 of 4