Lucene search
GoogleOSV:ALSA-2023:4643HistoryAug 14, 2023 - 12:00 a.m.
Important: .NET 7.0 security, bug fix, and enhancement update
2023-08-1400:00:00
Google
osv.dev
4
.net framework
security
bug fix
enhancement
api
clr
vulnerability
rce
kestrel
denial of service
cve
cvss score
references
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
High
EPSS
0.021
Percentile
89.5%
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.110 and .NET Runtime 7.0.10.
Security Fix(es):
- dotnet: RCE under dotnet commands (CVE-2023-35390)
- dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
oraclelinux
oraclelinux
.NET 7.0 security, bug fix, and enhancement update
2023-08-15 00:00:00
.NET 7.0 security, bug fix, and enhancement update
2023-08-16 00:00:00
.NET 6.0 security, bug fix, and enhancement update
2023-08-16 00:00:00
nessus
nessus
RHEL 9 : .NET 7.0 (RHSA-2023:4642)
2023-08-14 00:00:00
Oracle Linux 9 : .NET / 7.0 (ELSA-2023-4642)
2023-08-16 00:00:00
AlmaLinux 9 : .NET 7.0 (ALSA-2023:4642)
2023-08-15 00:00:00
redhat
redhat
(RHSA-2023:4640) Important: .NET 6.0 security update
2023-08-14 13:46:13
fedora
fedora
[SECURITY] Fedora 37 Update: dotnet6.0-6.0.121-1.fc37
2023-08-20 00:45:06
[SECURITY] Fedora 37 Update: dotnet7.0-7.0.110-1.fc37
2023-08-20 00:45:07
[SECURITY] Fedora 38 Update: dotnet6.0-6.0.121-1.fc38
2023-08-20 00:49:10
osv
osv
Important: .NET 6.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
Important: .NET 7.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
Important: .NET 6.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
openvas
openvas
Fedora: Security Advisory for dotnet7.0 (FEDORA-2023-cbc688b8ca)
2023-08-20 00:00:00
Fedora: Security Advisory for dotnet6.0 (FEDORA-2023-25112489ab)
2023-08-20 00:00:00
Fedora: Security Advisory for dotnet7.0 (FEDORA-2023-25112489ab)
2023-08-20 00:00:00
almalinux
almalinux
Important: .NET 6.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
Important: .NET 7.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
Important: .NET 7.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
ibm
ibm
rocky
rocky
.NET 6.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
.NET 7.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
mskb
mskb
.NET 7.0 Update - August 8, 2023 (KB5029689)
2023-08-08 07:00:00
.NET 6.0 Update - August 8, 2023 (KB5029688)
2023-08-08 07:00:00
ubuntu
ubuntu
.NET vulnerabilities
2023-08-10 00:00:00
.NET vulnerabilities
2023-08-08 00:00:00
cve
cve
CVE-2023-35390
2023-08-08 18:15:13
CVE-2023-38180
2023-08-08 19:15:10
alpinelinux
alpinelinux
CVE-2023-35390
2023-08-08 18:15:13
CVE-2023-38180
2023-08-08 19:15:10
cvelist
cvelist
CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability
2023-08-08 17:08:54
CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability
2023-08-08 18:52:31
nvd
nvd
CVE-2023-35390
2023-08-08 18:15:13
CVE-2023-38180
2023-08-08 19:15:10
vulnrichment
vulnrichment
CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability
2023-08-08 17:08:54
CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability
2023-08-08 18:52:31
ubuntucve
ubuntucve
CVE-2023-35390
2023-08-08 00:00:00
CVE-2023-38180
2023-08-08 00:00:00
redhatcve
redhatcve
CVE-2023-35390
2023-08-08 17:51:11
CVE-2023-38180
2023-08-08 17:51:44
veracode
veracode
Remote Code Execution (RCE)
2023-08-10 02:58:02
Denial Of Service (DoS)
2023-08-09 19:30:29
prion
prion
Remote code execution
2023-08-08 18:15:00
Denial of service
2023-08-08 19:15:00
mscve
mscve
.NET and Visual Studio Remote Code Execution Vulnerability
2023-08-08 07:00:00
.NET and Visual Studio Denial of Service Vulnerability
2023-08-08 07:00:00
github
github
.NET Remote Code Execution Vulnerability
2023-08-09 13:15:38
.NET Denial of Service Vulnerability
2023-08-09 12:56:43
redos
redos
ROS-20240702-01
2024-07-02 00:00:00
attackerkb
attackerkb
CVE-2023-38180
2023-08-08 00:00:00
thn
thn
Microsoft Releases Patches for 74 New Vulnerabilities in August Update
2023-08-09 04:26:00
cisa_kev
cisa_kev
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
2023-08-09 00:00:00
kaspersky
kaspersky
KLA51717 Multiple vulnerabilities in Microsoft Developer Tools
2023-08-08 00:00:00
krebs
krebs
Microsoft Patch Tuesday, August 2023 Edition
2023-08-09 02:22:57
malwarebytes
malwarebytes
August Patch Tuesday stops actively exploited attack chain and more
2023-08-10 01:00:00
avleonov
avleonov
ics
ics
Siemens ST7 ScadaConnect
2024-06-13 12:00:00
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday, August 2023 Security Update Review
2023-08-08 20:35:59
talosblog
talosblog
Six critical vulnerabilities included in August’s Microsoft security update
2023-08-08 19:25:42
rapid7blog
rapid7blog
Patch Tuesday - August 2023
2023-08-08 21:11:35
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
High
EPSS
0.021
Percentile
89.5%
Related for OSV:ALSA-2023:4643