CVE-2023-33170

2023-07-1118:15:15

Alpine Linux Development Team

security.alpinelinux.org

asp.net

visual studio

security bypass

vulnerability

cve-2023-33170

unix

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchdotnet6-build< 6.0.120-r0UNKNOWN
Alpineedge-communitynoarchdotnet6-runtime< 6.0.20-r0UNKNOWN
Alpine3.18-communitynoarchdotnet6-build< 6.0.120-r0UNKNOWN
Alpine3.18-communitynoarchdotnet6-runtime< 6.0.20-r0UNKNOWN
Alpine3.18-communitynoarchdotnet7-build< 7.0.109-r0UNKNOWN
Alpine3.18-communitynoarchdotnet7-runtime< 7.0.9-r0UNKNOWN
Alpine3.19-communitynoarchdotnet6-build< 6.0.120-r0UNKNOWN
Alpine3.19-communitynoarchdotnet6-runtime< 6.0.20-r0UNKNOWN
Alpine3.19-communitynoarchdotnet7-build< 7.0.109-r0UNKNOWN
Alpine3.19-communitynoarchdotnet7-runtime< 7.0.9-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	dotnet6-build	< 6.0.120-r0	UNKNOWN
Alpine	edge-community	noarch	dotnet6-runtime	< 6.0.20-r0	UNKNOWN
Alpine	3.18-community	noarch	dotnet6-build	< 6.0.120-r0	UNKNOWN
Alpine	3.18-community	noarch	dotnet6-runtime	< 6.0.20-r0	UNKNOWN
Alpine	3.18-community	noarch	dotnet7-build	< 7.0.109-r0	UNKNOWN
Alpine	3.18-community	noarch	dotnet7-runtime	< 7.0.9-r0	UNKNOWN
Alpine	3.19-community	noarch	dotnet6-build	< 6.0.120-r0	UNKNOWN
Alpine	3.19-community	noarch	dotnet6-runtime	< 6.0.20-r0	UNKNOWN
Alpine	3.19-community	noarch	dotnet7-build	< 7.0.109-r0	UNKNOWN
Alpine	3.19-community	noarch	dotnet7-runtime	< 7.0.9-r0	UNKNOWN