Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:4640
HistoryAug 14, 2023 - 1:46 p.m.

(RHSA-2023:4640) Important: .NET 6.0 security update

2023-08-1413:46:13
access.redhat.com
10
.net 6.0
security update
rce
dos
vulnerabilities
cve-2023-35390
cve-2023-38180

0.008 Low

EPSS

Percentile

81.1%

JSON

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

Security Fix(es):

  • dotnet: RCE under dotnet commands (CVE-2023-35390)

  • dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8aarch64dotnet-hostfxr-6.0< 6.0.21-1.el8_6dotnet-hostfxr-6.0-6.0.21-1.el8_6.aarch64.rpm
RedHat8aarch64dotnet-templates-6.0< 6.0.121-1.el8_6dotnet-templates-6.0-6.0.121-1.el8_6.aarch64.rpm
RedHat8x86_64dotnet-hostfxr-6.0< 6.0.21-1.el8_6dotnet-hostfxr-6.0-6.0.21-1.el8_6.x86_64.rpm
RedHat8s390xdotnet-hostfxr-6.0< 6.0.21-1.el8_6dotnet-hostfxr-6.0-6.0.21-1.el8_6.s390x.rpm
RedHat8s390xdotnet-host< 6.0.21-1.el8_6dotnet-host-6.0.21-1.el8_6.s390x.rpm
RedHat8s390xdotnet< 6.0.121-1.el8_6dotnet-6.0.121-1.el8_6.s390x.rpm
RedHat8aarch64dotnet6.0-debuginfo< 6.0.121-1.el8_6dotnet6.0-debuginfo-6.0.121-1.el8_6.aarch64.rpm
RedHat8s390xdotnet-apphost-pack-6.0< 6.0.21-1.el8_6dotnet-apphost-pack-6.0-6.0.21-1.el8_6.s390x.rpm
RedHat8x86_64dotnet-targeting-pack-6.0< 6.0.21-1.el8_6dotnet-targeting-pack-6.0-6.0.21-1.el8_6.x86_64.rpm
RedHat8s390xdotnet6.0-debuginfo< 6.0.121-1.el8_6dotnet6.0-debuginfo-6.0.121-1.el8_6.s390x.rpm
Rows per page:
1-10 of 571

Related

redhat 6
nessus 25
fedora 4
openvas 7
osv 15
almalinux 4
oraclelinux 4
rocky 2
ibm 1
ubuntu 2
mskb 2
vulnrichment 1
nvd 2
cve 2
attackerkb 1
veracode 2
alpinelinux 2
cvelist 2
redhatcve 2
ubuntucve 2
github 2
prion 2
mscve 2
thn 2
cisa_kev 1
kaspersky 1
krebs 1
malwarebytes 1
avleonov 1
qualysblog 1
ics 1
talosblog 1
rapid7blog 1
redhat
redhat
(RHSA-2023:4644) Important: .NET 6.0 security, bug fix, and enhancement update
2023-08-14 13:55:00
(RHSA-2023:4641) Important: rh-dotnet60-dotnet security, bug fix, and enhancement update
2023-08-14 13:47:20
(RHSA-2023:4642) Important: .NET 7.0 security, bug fix, and enhancement update
2023-08-14 13:51:04
nessus
nessus
AlmaLinux 8 : .NET 6.0 (ALSA-2023:4645)
2023-08-16 00:00:00
RHEL 8 : .NET 6.0 (RHSA-2023:4645)
2023-08-14 00:00:00
AlmaLinux 8 : .NET 7.0 (ALSA-2023:4643)
2023-08-16 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: dotnet7.0-7.0.110-1.fc37
2023-08-20 00:45:07
[SECURITY] Fedora 37 Update: dotnet6.0-6.0.121-1.fc37
2023-08-20 00:45:06
[SECURITY] Fedora 38 Update: dotnet7.0-7.0.110-1.fc38
2023-08-20 00:49:11
openvas
openvas
Fedora: Security Advisory for dotnet6.0 (FEDORA-2023-25112489ab)
2023-08-20 00:00:00
Fedora: Security Advisory for dotnet7.0 (FEDORA-2023-cbc688b8ca)
2023-08-20 00:00:00
Fedora: Security Advisory for dotnet6.0 (FEDORA-2023-cbc688b8ca)
2023-08-20 00:00:00
osv
osv
Important: .NET 6.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
Important: .NET 6.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
Important: .NET 7.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
almalinux
almalinux
Important: .NET 6.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
Important: .NET 6.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
Important: .NET 7.0 security, bug fix, and enhancement update
2023-08-14 00:00:00
oraclelinux
oraclelinux
.NET 7.0 security, bug fix, and enhancement update
2023-08-16 00:00:00
.NET 7.0 security, bug fix, and enhancement update
2023-08-15 00:00:00
.NET 6.0 security, bug fix, and enhancement update
2023-08-16 00:00:00
rocky
rocky
.NET 7.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
.NET 6.0 security, bug fix, and enhancement update
2023-10-06 23:10:12
ibm
ibm
Security Bulletin: Vulnerabilities in Microsoft .NET Core and Microsoft ASP.NET may affect IBM Robotic Process Automation for Cloud Pak
2023-09-12 19:09:20
ubuntu
ubuntu
.NET vulnerabilities
2023-08-10 00:00:00
.NET vulnerabilities
2023-08-08 00:00:00
mskb
mskb
.NET 7.0 Update - August 8, 2023 (KB5029689)
2023-08-08 07:00:00
.NET 6.0 Update - August 8, 2023 (KB5029688)
2023-08-08 07:00:00
vulnrichment
vulnrichment
CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability
2023-08-08 17:08:54
nvd
nvd
CVE-2023-35390
2023-08-08 18:15:13
CVE-2023-38180
2023-08-08 19:15:10
cve
cve
CVE-2023-35390
2023-08-08 18:15:13
CVE-2023-38180
2023-08-08 19:15:10
attackerkb
attackerkb
CVE-2023-38180
2023-08-08 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-08-09 19:30:29
Remote Code Execution (RCE)
2023-08-10 02:58:02
alpinelinux
alpinelinux
CVE-2023-35390
2023-08-08 18:15:13
CVE-2023-38180
2023-08-08 19:15:10
cvelist
cvelist
CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability
2023-08-08 17:08:54
CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability
2023-08-08 18:52:31
redhatcve
redhatcve
CVE-2023-35390
2023-08-08 17:51:11
CVE-2023-38180
2023-08-08 17:51:44
ubuntucve
ubuntucve
CVE-2023-35390
2023-08-08 00:00:00
CVE-2023-38180
2023-08-08 00:00:00
github
github
.NET Denial of Service Vulnerability
2023-08-09 12:56:43
.NET Remote Code Execution Vulnerability
2023-08-09 13:15:38
prion
prion
Remote code execution
2023-08-08 18:15:00
Denial of service
2023-08-08 19:15:00
mscve
mscve
.NET and Visual Studio Remote Code Execution Vulnerability
2023-08-08 07:00:00
.NET and Visual Studio Denial of Service Vulnerability
2023-08-08 07:00:00
thn
thn
CISA Adds Microsoft .NET Vulnerability to KEV Catalog Due to Active Exploitation
2023-08-11 03:38:00
Microsoft Releases Patches for 74 New Vulnerabilities in August Update
2023-08-09 04:26:00
cisa_kev
cisa_kev
Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability
2023-08-09 00:00:00
kaspersky
kaspersky
KLA51717 Multiple vulnerabilities in Microsoft Developer Tools
2023-08-08 00:00:00
krebs
krebs
Microsoft Patch Tuesday, August 2023 Edition
2023-08-09 02:22:57
malwarebytes
malwarebytes
August Patch Tuesday stops actively exploited attack chain and more
2023-08-10 01:00:00
avleonov
avleonov
August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper
2023-08-30 16:15:31
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday, August 2023 Security Update Review
2023-08-08 20:35:59
ics
ics
Siemens ST7 ScadaConnect
2024-06-13 12:00:00
talosblog
talosblog
Six critical vulnerabilities included in August’s Microsoft security update
2023-08-08 19:25:42
rapid7blog
rapid7blog
Patch Tuesday - August 2023
2023-08-08 21:11:35

0.008 Low

EPSS

Percentile

81.1%

JSON
Related for RHSA-2023:4640
redhat6nessus25fedora4openvas7osv15almalinux4oraclelinux4rocky2ibm1ubuntu2mskb2vulnrichment1nvd2cve2attackerkb1veracode2alpinelinux2cvelist2redhatcve2ubuntucve2github2prion2mscve2thn2cisa_kev1kaspersky1krebs1malwarebytes1avleonov1qualysblog1ics1talosblog1rapid7blog1