Lucene search
GoogleOSV:ALSA-2023:4642HistoryAug 14, 2023 - 12:00 a.m.
Important: .NET 7.0 security, bug fix, and enhancement update
2023-08-1400:00:00
Google
osv.dev
5
.net
security vulnerability
bug fix
enhancement
.net sdk
.net runtime
rce
kestrel vulnerability
slow read attacks
denial of service attack
cve page
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.1 High
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.1%
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.110 and .NET Runtime 7.0.10.
Security Fix(es):
- dotnet: RCE under dotnet commands (CVE-2023-35390)
- dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
nessus
nessus
Oracle Linux 9 : .NET / 7.0 (ELSA-2023-4642)
2023-08-16 00:00:00
AlmaLinux 9 : .NET 7.0 (ALSA-2023:4642)
2023-08-15 00:00:00
RHEL 9 : .NET 7.0 (RHSA-2023:4642)
2023-08-14 00:00:00
redhat
redhat
(RHSA-2023:4639) Important: .NET 6.0 security update
2023-08-14 13:45:39
oraclelinux
oraclelinux
.NET 7.0 security, bug fix, and enhancement update
2023-08-15 00:00:00
.NET 7.0 security, bug fix, and enhancement update
2023-08-16 00:00:00
.NET 6.0 security, bug fix, and enhancement update
2023-08-15 00:00:00
almalinux
almalinux
Important: .NET 6.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
Important: .NET 6.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
Important: .NET 7.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
rocky
rocky
.NET 7.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
.NET 6.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
osv
osv
Important: .NET 7.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
Important: .NET 6.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
Important: .NET 6.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
openvas
openvas
Fedora: Security Advisory for dotnet6.0 (FEDORA-2023-cbc688b8ca)
2023-08-20 00:00:00
Fedora: Security Advisory for dotnet7.0 (FEDORA-2023-cbc688b8ca)
2023-08-20 00:00:00
Fedora: Security Advisory for dotnet6.0 (FEDORA-2023-25112489ab)
2023-08-20 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: dotnet6.0-6.0.121-1.fc37
2023-08-20 00:45:06
[SECURITY] Fedora 37 Update: dotnet7.0-7.0.110-1.fc37
2023-08-20 00:45:07
[SECURITY] Fedora 38 Update: dotnet7.0-7.0.110-1.fc38
2023-08-20 00:49:11
ibm
ibm
mskb
mskb
.NET 7.0 Update - August 8, 2023 (KB5029689)
2023-08-08 07:00:00
.NET 6.0 Update - August 8, 2023 (KB5029688)
2023-08-08 07:00:00
ubuntu
ubuntu
.NET vulnerabilities
2023-08-10 00:00:00
.NET vulnerabilities
2023-08-08 00:00:00
cve
cve
CVE-2023-35390
2023-08-08 18:15:13
CVE-2023-38180
2023-08-08 19:15:10
redhatcve
redhatcve
CVE-2023-35390
2023-08-08 17:51:11
CVE-2023-38180
2023-08-08 17:51:44
ubuntucve
ubuntucve
CVE-2023-35390
2023-08-08 00:00:00
CVE-2023-38180
2023-08-08 00:00:00
nvd
nvd
CVE-2023-38180
2023-08-08 19:15:10
CVE-2023-35390
2023-08-08 18:15:13
github
github
.NET Denial of Service Vulnerability
2023-08-09 12:56:43
.NET Remote Code Execution Vulnerability
2023-08-09 13:15:38
veracode
veracode
Denial Of Service (DoS)
2023-08-09 19:30:29
Remote Code Execution (RCE)
2023-08-10 02:58:02
alpinelinux
alpinelinux
CVE-2023-35390
2023-08-08 18:15:13
CVE-2023-38180
2023-08-08 19:15:10
cvelist
cvelist
CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability
2023-08-08 17:08:54
CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability
2023-08-08 18:52:31
mscve
mscve
.NET and Visual Studio Denial of Service Vulnerability
2023-08-08 07:00:00
.NET and Visual Studio Remote Code Execution Vulnerability
2023-08-08 07:00:00
cisa_kev
cisa_kev
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
2023-08-09 00:00:00
thn
thn
Microsoft Releases Patches for 74 New Vulnerabilities in August Update
2023-08-09 04:26:00
prion
prion
Denial of service
2023-08-08 19:15:00
Remote code execution
2023-08-08 18:15:00
vulnrichment
vulnrichment
CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability
2023-08-08 17:08:54
attackerkb
attackerkb
CVE-2023-38180
2023-08-08 00:00:00
kaspersky
kaspersky
KLA51717 Multiple vulnerabilities in Microsoft Developer Tools
2023-08-08 00:00:00
krebs
krebs
Microsoft Patch Tuesday, August 2023 Edition
2023-08-09 02:22:57
malwarebytes
malwarebytes
August Patch Tuesday stops actively exploited attack chain and more
2023-08-10 01:00:00
avleonov
avleonov
ics
ics
Siemens ST7 ScadaConnect
2024-06-13 12:00:00
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday, August 2023 Security Update Review
2023-08-08 20:35:59
talosblog
talosblog
Six critical vulnerabilities included in August’s Microsoft security update
2023-08-08 19:25:42
rapid7blog
rapid7blog
Patch Tuesday - August 2023
2023-08-08 21:11:35
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.1 High
AI Score
Confidence
High
0.008 Low
EPSS
Percentile
81.1%
Related for OSV:ALSA-2023:4642