Red Hat Security Advisory

RHSA-2023:3592

.NET 7.0 security, bug fix, and enhancement update

Released 2023-06-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) aspnetcore-runtime-7.0-7.0.7-1.el9_2, aspnetcore-targeting-pack-7.0-7.0.7-1.el9_2, dotnet-apphost-pack-7.0-7.0.7-1.el9_2 +8
Red Hat Enterprise Linux CRB (v. 9) dotnet-sdk-7.0-source-built-artifacts-7.0.107-1.el9_2

TI-2023-15338 CVE-2023-32032 · GHSA-q85v-668x-6fjr

MEDIUM 62

.NET and Visual Studio Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.006 Published 2023-06-13 Fixed in 7.0.7, 17.2.16 +4 CWE-20

TI-2023-13725 CVE-2023-29331 · GHSA-555c-2p6r-68mm

MEDIUM 44

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02627 Published 2023-06-14 Fixed in 6.0.18, 7.0.7 +17 CWE-400

TI-2023-10422 CVE-2023-24936 · GHSA-jx7q-xxmw-44vf

LOW 38

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01558 Published 2023-06-14 Partial fix · 17.2.16, 17.0.22 +13

TI-2023-16307 CVE-2023-33128 · GHSA-x469-cv7m-77r9

LOW 36

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00999 Published 2023-06-13 Fixed in 6.0.18, 7.0.7 +5 CWE-416

TI-2023-13731 CVE-2023-29337 · GHSA-6qmf-mmc7-6c2p

LOW 36

NuGet Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.01148 Published 2023-06-14 Fixed in 6.2.4, 6.4.2 +6 CWE-367