Red Hat Security Advisory

RHSA-2023:3581

.NET 6.0 security, bug fix, and enhancement update

Released 2023-06-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) aspnetcore-runtime-6.0-6.0.18-1.el9_2, aspnetcore-targeting-pack-6.0-6.0.18-1.el9_2, dotnet-apphost-pack-6.0-6.0.18-1.el9_2 +6
Red Hat Enterprise Linux CRB (v. 9) dotnet-sdk-6.0-source-built-artifacts-6.0.118-1.el9_2

TI-2023-13725 CVE-2023-29331 · GHSA-555c-2p6r-68mm

MEDIUM 44

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02627 Published 2023-06-14 Fixed in 6.0.18, 7.0.7 +17 CWE-400

TI-2023-10422 CVE-2023-24936 · GHSA-jx7q-xxmw-44vf

LOW 38

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01558 Published 2023-06-14 Partial fix · 17.2.16, 17.0.22 +13

TI-2023-16307 CVE-2023-33128 · GHSA-x469-cv7m-77r9

LOW 36

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00999 Published 2023-06-13 Fixed in 6.0.18, 7.0.7 +5 CWE-416

TI-2023-13731 CVE-2023-29337 · GHSA-6qmf-mmc7-6c2p

LOW 36

NuGet Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.01148 Published 2023-06-14 Fixed in 6.2.4, 6.4.2 +6 CWE-367