Lucene search
UbuntuUSN-6438-1HistoryOct 19, 2023 - 12:00 a.m.
.NET vulnerabilities
2023-10-1900:00:00
ubuntu.com
25
.net
ubuntu
dotnet6
dotnet7
kestrel
http/2
x.509
denial of service
cve-2023-36799
cve-2023-44487
web server
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.9 High
AI Score
Confidence
High
0.732 High
EPSS
Percentile
98.1%
Releases
- Ubuntu 23.10
Packages
- dotnet6 - dotNET CLI tools and runtime
- dotnet7 - dotNET CLI tools and runtime
Details
Kevin Jones discovered that .NET did not properly process certain
X.509 certificates. An attacker could possibly use this issue to
cause a denial of service. (CVE-2023-36799)
It was discovered that the .NET Kestrel web server did not properly
handle HTTP/2 requests. A remote attacker could possibly use this
issue to cause a denial of service. (CVE-2023-44487)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.10 | noarch | aspnetcore-runtime-6.0 | < 6.0.123-0ubuntu1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | aspnetcore-targeting-pack-6.0 | < 6.0.123-0ubuntu1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | dotnet-apphost-pack-6.0 | < 6.0.123-0ubuntu1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | dotnet-apphost-pack-6.0-dbgsym | < 6.0.123-0ubuntu1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | dotnet-host | < 6.0.123-0ubuntu1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | dotnet-host-dbgsym | < 6.0.123-0ubuntu1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | dotnet-hostfxr-6.0 | < 6.0.123-0ubuntu1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | dotnet-hostfxr-6.0-dbgsym | < 6.0.123-0ubuntu1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | dotnet-runtime-6.0 | < 6.0.123-0ubuntu1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | dotnet-runtime-6.0-dbgsym | < 6.0.123-0ubuntu1 | UNKNOWN |
Related
ubuntu
ubuntu
.Net regressions
2023-10-25 00:00:00
.NET vulnerability
2023-09-12 00:00:00
.Net regressions
2023-10-25 00:00:00
osv
osv
dotnet6, dotnet7 vulnerabilities
2023-10-19 16:12:40
.Net regressions
2023-10-25 03:44:47
.Net regressions
2023-10-25 03:26:15
openvas
openvas
Ubuntu: Security Advisory (USN-6438-1)
2023-10-20 00:00:00
Ubuntu: Security Advisory (USN-6438-2)
2023-10-25 00:00:00
Ubuntu: Security Advisory (USN-6362-1)
2023-09-13 00:00:00
nessus
nessus
Ubuntu 23.10 : .NET vulnerabilities (USN-6438-1)
2023-10-19 00:00:00
AlmaLinux 9 : .NET 7.0 (ALSA-2023:5146)
2023-09-14 00:00:00
RHEL 9 : .NET 6.0 (RHSA-2023:6242)
2023-11-01 00:00:00
almalinux
almalinux
Moderate: .NET 7.0 security update
2023-09-13 00:00:00
Moderate: .NET 6.0 security update
2023-09-13 00:00:00
Moderate: .NET 7.0 security update
2023-09-13 00:00:00
cvelist
cvelist
CVE-2023-36799 .NET Core and Visual Studio Denial of Service Vulnerability
2023-09-12 16:58:38
github
github
HTTP/2 Stream Cancellation Attack
2023-10-10 21:28:24
redhat
redhat
(RHSA-2023:5142) Moderate: .NET 6.0 security and bug fix update
2023-09-13 09:19:20
(RHSA-2023:6242) Moderate: .NET 6.0 security update
2023-11-01 13:55:23
(RHSA-2023:5145) Moderate: .NET 7.0 security update
2023-09-13 14:26:39
redhatcve
redhatcve
CVE-2023-36799
2023-09-13 09:49:47
oraclelinux
oraclelinux
.NET 7.0 security update
2023-11-02 00:00:00
.NET 7.0 security update
2023-11-02 00:00:00
.NET 6.0 security update
2023-11-02 00:00:00
cve
cve
CVE-2023-36799
2023-09-12 17:15:15
alpinelinux
alpinelinux
CVE-2023-36799
2023-09-12 17:15:15
rocky
rocky
.NET 6.0 security update
2023-11-11 22:59:08
.NET 6.0 security update
2023-09-19 12:09:00
.NET 6.0 security update
2023-11-11 23:00:10
ubuntucve
ubuntucve
CVE-2023-36799
2023-09-12 00:00:00
nvd
nvd
CVE-2023-36799
2023-09-12 17:15:15
prion
prion
Denial of service
2023-09-12 17:15:00
vulnrichment
vulnrichment
CVE-2023-36799 .NET Core and Visual Studio Denial of Service Vulnerability
2023-09-12 16:58:38
mscve
mscve
.NET Core and Visual Studio Denial of Service Vulnerability
2023-09-12 07:00:00
veracode
veracode
Denial Of Service
2023-09-14 13:27:54
Denial Of Service (DoS)
2023-10-12 14:37:40
atlassian
atlassian
cbl_mariner
cbl_mariner
amazon
amazon
Important: nghttp2
2023-10-16 13:45:00
fedora
fedora
[SECURITY] Fedora 39 Update: proxygen-2023.10.16.00-1.fc39
2023-11-03 19:01:54
[SECURITY] Fedora 38 Update: wangle-2023.10.16.00-1.fc38
2023-10-24 01:23:49
[SECURITY] Fedora 38 Update: fbthrift-2023.10.16.00-1.fc38
2023-10-24 01:23:49
redos
redos
ROS-20231107-01
2023-11-07 00:00:00
debian
debian
[SECURITY] [DLA 3617-2] tomcat9 regression update
2023-10-16 22:23:23
[SECURITY] [DLA 3638-1] h2o security update
2023-10-31 14:09:23
githubexploit
githubexploit
Exploit for Uncontrolled Resource Consumption in Ietf Http
2023-12-11 23:12:03
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.9 High
AI Score
Confidence
High
0.732 High
EPSS
Percentile
98.1%
Related for USN-6438-1