.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Microsoft | Microsoft Visual Studio 2022 version 17.12 | 17.12.0 – < 17.12.20 | |
| Microsoft | Microsoft Visual Studio 2022 version 17.14 | 17.14.0 – < 17.14.32 | |
| Microsoft | Microsoft Visual Studio 2026 version 18.5 | 18.5.0 – < 18.5.3 | |
| microsoft | .net | 10.0.0 – < 10.0.8 | |
| Microsoft | .NET 10.0 | 10.0.0 – < 10.0.8 | |
| Microsoft | .NET 8.0 | 8.0.0 – < 8.0.27 | |
| Microsoft | .NET 9.0 | 9.0.0 – < 9.0.16 | |
| microsoft | visual studio 2022 | 17.14.0 – < 17.14.32 | |
| microsoft | visual studio 2026 | 18.5.0 – < 18.5.3 |
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* ≥ 17.12.0 < 17.12.20cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* ≥ 17.14.0 < 17.14.32cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:* ≥ 18.5.0 < 18.5.3cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* ≥ 8.0.0 < 8.0.27cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* ≥ 9.0.0 < 9.0.16Unser kostenloser Open-Source-Honeypot wartet auf Ports, die Ihr Server nicht nutzt, und meldet verbindende Scanner und Angreifer an eine gemeinsame Blockliste.