Bugs fixes in "dotnet10"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-70188 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security | 2026-10-19 |
| CVE | CVE-2026-70186 | Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-70183 | Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate | 2026-10-19 |
| CVE | CVE-2026-70181 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-70179 | Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | 2026-10-19 |
| CVE | CVE-2026-70175 | Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. | 2026-10-19 |
| CVE | CVE-2026-70159 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-69651 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-66822 | Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network. | 2026-10-19 |
| CVE | CVE-2026-58280 | Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-102870 | Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE | CVE-2026-96960 | Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-96959 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-96958 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-96957 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-19 |
| CVE | CVE-2026-96238 | Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network. | 2026-10-19 |
| CVE | CVE-2026-96237 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE | CVE-2026-96236 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-96233 | Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. | 2026-10-19 |
| CVE | CVE-2026-96231 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. | 2026-10-19 |
About
-
Send Feedback to @ubuntu_updates
