https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 11:31:24 +0000 https://vulnerability.circl.lu/vuln/cve-2024-38229 <p><strong>Affected:</strong> Microsoft .NET 8.0, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2022 version 17.11, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8</p> <p>.NET and Visual Studio Remote Code Execution Vulnerability</p> <p><strong>Affected:</strong> Microsoft .NET 8.0, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2022 version 17.11, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8</p> <p>.NET and Visual Studio Remote Code Execution Vulnerability</p> https://vulnerability.circl.lu/vuln/cve-2024-38229 https://vulnerability.circl.lu/vuln/usn-7058-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet8</p> <p>Brennan Conroy discovered that the .NET Kestrel web server did not properly handle closing HTTP/3 streams under certain circumstances. An attacker could possibly use this issue to achieve remote code execution. This vulnerability only impacted .NET8. (CVE-2024-38229)</p> <p>It was discovered that .NET components designed to process malicious input were susceptible to hash flooding attacks. An attacker could possibly use this issue to cause a denial of service, resulting in a crash. (CVE-2024-43483)</p> <p>It was discovered that the .NET System.IO.Packaging namespace did not properly process SortedList data structures. An attacker could possibly use this issue to cause a denial of service, resulting in a crash. (CVE-2024-43484)</p> <p>It was discovered that .NET did not properly handle the deserialization of of certain JSON properties. An attacker could possibly use this issue to cause a denial of service, resulting in a crash. (CVE-2024-43485)</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet8</p> <p>Brennan Conroy discovered that the .NET Kestrel web server did not properly handle closing HTTP/3 streams under certain circumstances. An attacker could possibly use this issue to achieve remote code execution. This vulnerability only impacted .NET8. (CVE-2024-38229)</p> <p>It was discovered that .NET components designed to process malicious input were susceptible to hash flooding attacks. An attacker could possibly use this issue to cause a denial of service, resulting in a crash. (CVE-2024-43483)</p> <p>It was discovered that the .NET System.IO.Packaging namespace did not properly process SortedList data structures. An attacker could possibly use this issue to cause a denial of service, resulting in a crash. (CVE-2024-43484)</p> <p>It was discovered that .NET did not properly handle the deserialization of of certain JSON properties. An attacker could possibly use this issue to cause a denial of service, resulting in a crash. (CVE-2024-43485)</p> https://vulnerability.circl.lu/vuln/usn-7058-1