Summary
It was discovered that .NET did not properly handle memory in it's
Double Parse routine. An attacker could possibly use this issue to
achieve remote code execution. (CVE-2024-30045)
It was discovered that .NET did not properly handle the usage of a
shared resource. An attacker could possibly use this to cause a dead-lock
condition, resulting in a denial of service. (CVE-2024-30046)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | dotnet7 | 7.0.119-0ubuntu1~22.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | dotnet8 | 8.0.105-8.0.5-0ubuntu1~22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | dotnet8 | 8.0.105-8.0.5-0ubuntu1~24.04.1 |
Vulnerabilities 2
-
Medium 6.3
.NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
-
Medium 5.9
Visual Studio Denial of Service Vulnerability
Visual Studio Denial of Service Vulnerability