Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
almalinuxAlmaLinuxALSA-2023:4644
HistoryAug 14, 2023 - 12:00 a.m.

Important: .NET 6.0 security, bug fix, and enhancement update

2023-08-1400:00:00
errata.almalinux.org
11
.net framework
security vulnerability
api
rce
kestrel vulnerability
cve-2023-35390
cve-2023-38180
cvss score

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.008 Low

EPSS

Percentile

81.1%

JSON

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.121 and .NET Runtime 6.0.21.

Security Fix(es):

  • dotnet: RCE under dotnet commands (CVE-2023-35390)
  • dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9aarch64dotnet-templates-6.0< 6.0.121-1.el9_2dotnet-templates-6.0-6.0.121-1.el9_2.aarch64.rpm
almalinux9aarch64aspnetcore-targeting-pack-6.0< 6.0.21-1.el9_2aspnetcore-targeting-pack-6.0-6.0.21-1.el9_2.aarch64.rpm
almalinux9aarch64dotnet-targeting-pack-6.0< 6.0.21-1.el9_2dotnet-targeting-pack-6.0-6.0.21-1.el9_2.aarch64.rpm
almalinux9aarch64aspnetcore-runtime-6.0< 6.0.21-1.el9_2aspnetcore-runtime-6.0-6.0.21-1.el9_2.aarch64.rpm
almalinux9aarch64dotnet-runtime-6.0< 6.0.21-1.el9_2dotnet-runtime-6.0-6.0.21-1.el9_2.aarch64.rpm
almalinux9aarch64dotnet-hostfxr-6.0< 6.0.21-1.el9_2dotnet-hostfxr-6.0-6.0.21-1.el9_2.aarch64.rpm
almalinux9aarch64dotnet-sdk-6.0< 6.0.121-1.el9_2dotnet-sdk-6.0-6.0.121-1.el9_2.aarch64.rpm
almalinux9aarch64dotnet-apphost-pack-6.0< 6.0.21-1.el9_2dotnet-apphost-pack-6.0-6.0.21-1.el9_2.aarch64.rpm
almalinux9x86_64aspnetcore-runtime-6.0< 6.0.21-1.el9_2aspnetcore-runtime-6.0-6.0.21-1.el9_2.x86_64.rpm
almalinux9x86_64dotnet-templates-6.0< 6.0.121-1.el9_2dotnet-templates-6.0-6.0.121-1.el9_2.x86_64.rpm
Rows per page:
1-10 of 271

Related

nessus 25
redhat 7
oraclelinux 4
rocky 2
osv 15
openvas 7
fedora 4
almalinux 3
ibm 1
mskb 2
ubuntu 2
cve 2
redhatcve 2
ubuntucve 2
nvd 2
github 2
veracode 2
alpinelinux 2
cvelist 2
mscve 2
cisa_kev 1
thn 2
prion 2
vulnrichment 1
attackerkb 1
kaspersky 1
krebs 1
malwarebytes 1
avleonov 1
ics 1
qualysblog 1
talosblog 1
rapid7blog 1
nessus
nessus
Oracle Linux 9 : .NET / 7.0 (ELSA-2023-4642)
2023-08-16 00:00:00
AlmaLinux 9 : .NET 7.0 (ALSA-2023:4642)
2023-08-15 00:00:00
RHEL 9 : .NET 7.0 (RHSA-2023:4642)
2023-08-14 00:00:00
redhat
redhat
(RHSA-2023:4645) Important: .NET 6.0 security, bug fix, and enhancement update
2023-08-14 13:55:36
(RHSA-2023:4643) Important: .NET 7.0 security, bug fix, and enhancement update
2023-08-14 13:54:14
(RHSA-2023:4639) Important: .NET 6.0 security update
2023-08-14 13:45:39
oraclelinux
oraclelinux
.NET 7.0 security, bug fix, and enhancement update
2023-08-15 00:00:00
.NET 7.0 security, bug fix, and enhancement update
2023-08-16 00:00:00
.NET 6.0 security, bug fix, and enhancement update
2023-08-15 00:00:00
rocky
rocky
.NET 7.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
.NET 6.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
osv
osv
Important: .NET 7.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
Important: .NET 6.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
Important: .NET 6.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
openvas
openvas
Fedora: Security Advisory for dotnet6.0 (FEDORA-2023-cbc688b8ca)
2023-08-20 00:00:00
Fedora: Security Advisory for dotnet7.0 (FEDORA-2023-cbc688b8ca)
2023-08-20 00:00:00
Fedora: Security Advisory for dotnet6.0 (FEDORA-2023-25112489ab)
2023-08-20 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: dotnet6.0-6.0.121-1.fc37
2023-08-20 00:45:06
[SECURITY] Fedora 37 Update: dotnet7.0-7.0.110-1.fc37
2023-08-20 00:45:07
[SECURITY] Fedora 38 Update: dotnet6.0-6.0.121-1.fc38
2023-08-20 00:49:10
almalinux
almalinux
Important: .NET 6.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
Important: .NET 7.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
Important: .NET 7.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Microsoft .NET Core and Microsoft ASP.NET may affect IBM Robotic Process Automation for Cloud Pak
2023-09-12 19:09:20
mskb
mskb
.NET 7.0 Update - August 8, 2023 (KB5029689)
2023-08-08 07:00:00
.NET 6.0 Update - August 8, 2023 (KB5029688)
2023-08-08 07:00:00
ubuntu
ubuntu
.NET vulnerabilities
2023-08-10 00:00:00
.NET vulnerabilities
2023-08-08 00:00:00
cve
cve
CVE-2023-35390
2023-08-08 18:15:13
CVE-2023-38180
2023-08-08 19:15:10
redhatcve
redhatcve
CVE-2023-35390
2023-08-08 17:51:11
CVE-2023-38180
2023-08-08 17:51:44
ubuntucve
ubuntucve
CVE-2023-35390
2023-08-08 00:00:00
CVE-2023-38180
2023-08-08 00:00:00
nvd
nvd
CVE-2023-38180
2023-08-08 19:15:10
CVE-2023-35390
2023-08-08 18:15:13
github
github
.NET Denial of Service Vulnerability
2023-08-09 12:56:43
.NET Remote Code Execution Vulnerability
2023-08-09 13:15:38
veracode
veracode
Denial Of Service (DoS)
2023-08-09 19:30:29
Remote Code Execution (RCE)
2023-08-10 02:58:02
alpinelinux
alpinelinux
CVE-2023-35390
2023-08-08 18:15:13
CVE-2023-38180
2023-08-08 19:15:10
cvelist
cvelist
CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability
2023-08-08 17:08:54
CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability
2023-08-08 18:52:31
mscve
mscve
.NET and Visual Studio Denial of Service Vulnerability
2023-08-08 07:00:00
.NET and Visual Studio Remote Code Execution Vulnerability
2023-08-08 07:00:00
cisa_kev
cisa_kev
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
2023-08-09 00:00:00
thn
thn
CISA Adds Microsoft .NET Vulnerability to KEV Catalog Due to Active Exploitation
2023-08-11 03:38:00
Microsoft Releases Patches for 74 New Vulnerabilities in August Update
2023-08-09 04:26:00
prion
prion
Denial of service
2023-08-08 19:15:00
Remote code execution
2023-08-08 18:15:00
vulnrichment
vulnrichment
CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability
2023-08-08 17:08:54
attackerkb
attackerkb
CVE-2023-38180
2023-08-08 00:00:00
kaspersky
kaspersky
KLA51717 Multiple vulnerabilities in Microsoft Developer Tools
2023-08-08 00:00:00
krebs
krebs
Microsoft Patch Tuesday, August 2023 Edition
2023-08-09 02:22:57
malwarebytes
malwarebytes
August Patch Tuesday stops actively exploited attack chain and more
2023-08-10 01:00:00
avleonov
avleonov
August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper
2023-08-30 16:15:31
ics
ics
Siemens ST7 ScadaConnect
2024-06-13 12:00:00
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday, August 2023 Security Update Review
2023-08-08 20:35:59
talosblog
talosblog
Six critical vulnerabilities included in August’s Microsoft security update
2023-08-08 19:25:42
rapid7blog
rapid7blog
Patch Tuesday - August 2023
2023-08-08 21:11:35

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.008 Low

EPSS

Percentile

81.1%

JSON
Related for ALSA-2023:4644
nessus25redhat7oraclelinux4rocky2osv15openvas7fedora4almalinux3ibm1mskb2ubuntu2cve2redhatcve2ubuntucve2nvd2github2veracode2alpinelinux2cvelist2mscve2cisa_kev1thn2prion2vulnrichment1attackerkb1kaspersky1krebs1malwarebytes1avleonov1ics1qualysblog1talosblog1rapid7blog1