Remote Code Execution

🗓️ 14 Sep 2023 10:47:31Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 35 Views

Vulnerability in Microsoft .NET 7.0 and 6.0 for Remote Code Execution via corrupted PDB file

Reporter	Title	Published	Views	Family All 112
Tenable Nessus	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-369)	3 Oct 202300:00	–	nessus
Tenable Nessus	Photon OS 4.0: Dotnet PHSA-2025-4.0-0804	22 May 202500:00	–	nessus
Tenable Nessus	Photon OS 5.0: Dotnet PHSA-2025-5.0-0499	13 Apr 202500:00	–	nessus
Tenable Nessus	Security Updates for Microsoft .NET Framework (September 2023)	13 Sep 202300:00	–	nessus
Tenable Nessus	Security Update for Microsoft .NET Core (September 2023)	12 Sep 202300:00	–	nessus
Tenable Nessus	Security Update for .NET Core SDK (September 2023)	14 Sep 202300:00	–	nessus
Tenable Nessus	Security Updates for Microsoft Visual Studio Products (September 2023)	12 Sep 202300:00	–	nessus
Tenable Nessus	KB5029365 for Microsoft Visual Studio 2013 (October 2023)	7 Apr 202600:00	–	nessus
Tenable Nessus	TencentOS Server 4: dotnet6.0 (TSSA-2024:0677)	16 Jun 202500:00	–	nessus
Tenable Nessus	TencentOS Server 4: dotnet7.0 (TSSA-2024:0680)	16 Jun 202500:00	–	nessus

Vulners

Node

dotnet6-runtime dotnet6-runtimeMatch6.0.13-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.10-r2csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.5-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.3-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.15-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.11-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.2-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.9-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.18-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.20-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.3-r3csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.4-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.14-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.3-r2csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.8-r2csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.6-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r3csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r4csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.5-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r2csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.7-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.8-r3csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.12-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.21-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.10-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.19-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.8-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.10-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.22-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.23-r0csharp

AND

alpinelinux alpine_linuxMatchedge

OR

dotnet6-build dotnet6-buildMatch6.0.104-r1csharp

AND

dotnet6-build dotnet6-buildMatch6.0.107-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.108-r1csharp

AND

dotnet6-build dotnet6-buildMatch6.0.103-r2csharp

AND

dotnet6-build dotnet6-buildMatch6.0.110-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.105-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.110-r1csharp

AND

dotnet6-build dotnet6-buildMatch6.0.103-r3csharp

AND

dotnet6-build dotnet6-buildMatch6.0.108-r2csharp

AND

dotnet6-build dotnet6-buildMatch6.0.113-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.111-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.110-r2csharp

AND

dotnet6-build dotnet6-buildMatch6.0.102-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.106-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.109-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.116-r1csharp

AND

dotnet6-build dotnet6-buildMatch6.0.112-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.114-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.115-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.116-r0csharp

AND

dotnet6-build dotnet6-buildMatch6.0.108-r3csharp

AND

dotnet6-build dotnet6-buildMatch6.0.103-r1csharp

AND

alpinelinux alpine_linuxMatchedge

OR

dotnet7-runtime dotnet7-runtimeMatch7.0.7-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.1-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.0-r3csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.0-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r2csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.4-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.3-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r3csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r1csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.10-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.9-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r4csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.8-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.2-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.0-r2csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.12-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.11-r0csharp

AND

alpinelinux alpine_linuxMatchedge

OR

dotnet7-build dotnet7-buildMatch7.0.101-r0csharp

AND

dotnet7-build dotnet7-buildMatch7.0.100-r3csharp

AND

dotnet7-build dotnet7-buildMatch7.0.104-r0csharp

AND

dotnet7-build dotnet7-buildMatch7.0.102-r0csharp

AND

dotnet7-build dotnet7-buildMatch7.0.105-r1csharp

AND

dotnet7-build dotnet7-buildMatch7.0.105-r0csharp

AND

dotnet7-build dotnet7-buildMatch7.0.105-r2csharp

AND

dotnet7-build dotnet7-buildMatch7.0.103-r0csharp

AND

alpinelinux alpine_linuxMatchedge

OR

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r1csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r3csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.18-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.16-r2csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.21-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.20-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.22-r0csharp

AND

dotnet6-runtime dotnet6-runtimeMatch6.0.23-r0csharp

AND

alpinelinux alpine_linuxMatch3.18

OR

dotnet7-runtime dotnet7-runtimeMatch7.0.10-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r2csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.7-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r3csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.9-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.5-r1csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.12-r0csharp

AND

dotnet7-runtime dotnet7-runtimeMatch7.0.11-r0csharp

AND

alpinelinux alpine_linuxMatch3.18

OR

microsoft.netcore.app.runtime.win-arm64 microsoft.netcore.app.runtime.win-arm64Range7.0.0-preview.1.22076.8–7.0.10csharp

OR

microsoft.netcore.app.runtime.win-arm64 microsoft.netcore.app.runtime.win-arm64Range6.0.0-preview.1.21102.12–6.0.21csharp

OR

microsoft.netcore.app.runtime.win-x64 microsoft.netcore.app.runtime.win-x64Range7.0.0-preview.1.22076.8–7.0.10csharp

OR

microsoft.netcore.app.runtime.win-x64 microsoft.netcore.app.runtime.win-x64Range6.0.0-preview.1.21102.12–6.0.21csharp

OR

microsoft.netcore.app.runtime.win-x86 microsoft.netcore.app.runtime.win-x86Range6.0.0-preview.1.21102.12–6.0.21csharp

OR

microsoft.netcore.app.runtime.win-x86 microsoft.netcore.app.runtime.win-x86Range7.0.0-preview.1.22076.8–7.0.10csharp

Source	Link
github	www.github.com/advisories/GHSA-h7jm-g87p-5935
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36796

29 May 2024 05:38Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.8

EPSS0.00754

SSVC

microsoft .net remote code execution vulnerability pdb file