https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:04:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-12583 bdu:2025-12583 https://cve.radiocsirt.org/vuln/bdu:2025-12583 https://cve.radiocsirt.org/vuln/bit-dotnet-2025-36854 <p><strong>Affected:</strong> Bitnami: dotnet</p> <p>A vulnerability ( CVE-2024-38229 https://www.cve.org/CVERecord ) exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a race condition may lead to use-after-free, resulting in Remote Code Execution.</p> <p>Per CWE-416: Use After Free https://cwe.mitre.org/data/definitions/416.html , Use After Free is when a product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory &#34;belongs&#34; to the code that operates on the new pointer.</p> <p>This issue affects EOL ASP.NET 6.0.0 &lt;= 6.0.36 as represented in this CVE, as well as 8.0.0 &lt;= 8.0.8, 9.0.0 &lt;= 9.0.0.RC.1 as represented in CVE-2024-38229 https://www.cve.org/CVERecord .</p> <p>Additionally, if you&#39;ve deployed self-contained applications https://docs.microsoft.com/dotnet/core/deploying/#self-contained-deployments-scd targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed.</p> <p>NOTE: This CVE only represents End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.</p> <p><strong>Affected:</strong> Bitnami: dotnet</p> <p>A vulnerability ( CVE-2024-38229 https://www.cve.org/CVERecord ) exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a race condition may lead to use-after-free, resulting in Remote Code Execution.</p> <p>Per CWE-416: Use After Free https://cwe.mitre.org/data/definitions/416.html , Use After Free is when a product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory &#34;belongs&#34; to the code that operates on the new pointer.</p> <p>This issue affects EOL ASP.NET 6.0.0 &lt;= 6.0.36 as represented in this CVE, as well as 8.0.0 &lt;= 8.0.8, 9.0.0 &lt;= 9.0.0.RC.1 as represented in CVE-2024-38229 https://www.cve.org/CVERecord .</p> <p>Additionally, if you&#39;ve deployed self-contained applications https://docs.microsoft.com/dotnet/core/deploying/#self-contained-deployments-scd targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed.</p> <p>NOTE: This CVE only represents End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.</p> https://cve.radiocsirt.org/vuln/bit-dotnet-2025-36854 https://cve.radiocsirt.org/vuln/euvd-2026-252134 EUVD-2026-252134 https://cve.radiocsirt.org/vuln/euvd-2026-252134 https://cve.radiocsirt.org/vuln/fkie_cve-2025-36854 <p>A vulnerability ( CVE-2024-38229 https://www.cve.org/CVERecord ) exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a race condition may lead to use-after-free, resulting in Remote Code Execution.</p> <p>Per CWE-416: Use After Free https://cwe.mitre.org/data/definitions/416.html , Use After Free is when a product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory &#34;belongs&#34; to the code that operates on the new pointer.</p> <p>This issue affects EOL ASP.NET 6.0.0 &lt;= 6.0.36 as represented in this CVE, as well as 8.0.0 &lt;= 8.0.8, 9.0.0-preview.1.24081.5 &lt;= 9.0.0.RC.1 as represented in  CVE-2024-38229 https://www.cve.org/CVERecord .</p> <p>Additionally, if you&#39;ve deployed self-contained applications https://docs.microsoft.com/dotnet/core/deploying/#self-contained-deployments-scd  targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed.</p> <p>NOTE: This CVE only represents End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.</p> <p>A vulnerability ( CVE-2024-38229 https://www.cve.org/CVERecord ) exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a race condition may lead to use-after-free, resulting in Remote Code Execution.</p> <p>Per CWE-416: Use After Free https://cwe.mitre.org/data/definitions/416.html , Use After Free is when a product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory &#34;belongs&#34; to the code that operates on the new pointer.</p> <p>This issue affects EOL ASP.NET 6.0.0 &lt;= 6.0.36 as represented in this CVE, as well as 8.0.0 &lt;= 8.0.8, 9.0.0-preview.1.24081.5 &lt;= 9.0.0.RC.1 as represented in  CVE-2024-38229 https://www.cve.org/CVERecord .</p> <p>Additionally, if you&#39;ve deployed self-contained applications https://docs.microsoft.com/dotnet/core/deploying/#self-contained-deployments-scd  targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed.</p> <p>NOTE: This CVE only represents End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-36854 https://cve.radiocsirt.org/vuln/ghsa-qwjg-j8g7-hwvh <p>A vulnerability ( CVE-2024-38229 https://www.cve.org/CVERecord ) exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a race condition may lead to use-after-free, resulting in Remote Code Execution.</p> <p>Per CWE-416: Use After Free https://cwe.mitre.org/data/definitions/416.html , Use After Free is when a product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory &#34;belongs&#34; to the code that operates on the new pointer.</p> <p>This issue affects EOL ASP.NET 6.0.0 &lt;= 6.0.36 as represented in this CVE, as well as 8.0.0 &lt;= 8.0.8, 9.0.0-preview.1.24081.5 &lt;= 9.0.0.RC.1 as represented in  CVE-2024-38229 https://www.cve.org/CVERecord .</p> <p>Additionally, if you&#39;ve deployed self-contained applications https://docs.microsoft.com/dotnet/core/deploying/#self-contained-deployments-scd  targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed.</p> <p>NOTE: This CVE only represents End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.</p> <p>A vulnerability ( CVE-2024-38229 https://www.cve.org/CVERecord ) exists in EOL ASP.NET when closing an HTTP/3 stream while application code is writing to the response body, a race condition may lead to use-after-free, resulting in Remote Code Execution.</p> <p>Per CWE-416: Use After Free https://cwe.mitre.org/data/definitions/416.html , Use After Free is when a product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory &#34;belongs&#34; to the code that operates on the new pointer.</p> <p>This issue affects EOL ASP.NET 6.0.0 &lt;= 6.0.36 as represented in this CVE, as well as 8.0.0 &lt;= 8.0.8, 9.0.0-preview.1.24081.5 &lt;= 9.0.0.RC.1 as represented in  CVE-2024-38229 https://www.cve.org/CVERecord .</p> <p>Additionally, if you&#39;ve deployed self-contained applications https://docs.microsoft.com/dotnet/core/deploying/#self-contained-deployments-scd  targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed.</p> <p>NOTE: This CVE only represents End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.</p> https://cve.radiocsirt.org/vuln/ghsa-qwjg-j8g7-hwvh