Red Hat Security Advisory

RHSA-2023:4449

.NET 6.0 security update

Released 2023-08-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.0) dotnet-sdk-6.0-source-built-artifacts-6.0.120-1.el9_0
Red Hat Enterprise Linux AppStream EUS (v.9.0) aspnetcore-runtime-6.0-6.0.20-1.el9_0, aspnetcore-targeting-pack-6.0-6.0.20-1.el9_0, dotnet-apphost-pack-6.0-6.0.20-1.el9_0 +8

TI-2023-13725 CVE-2023-29331 · GHSA-555c-2p6r-68mm

MEDIUM 44

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02627 Published 2023-06-14 Fixed in 6.0.18, 7.0.7 +17 CWE-400

TI-2023-16347 CVE-2023-33170 · GHSA-25c8-p796-jg6r

MEDIUM 41

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01994 Published 2023-07-11 Fixed in 17.2.17, 17.0.23 +6 CWE-362

TI-2023-16307 CVE-2023-33128 · GHSA-x469-cv7m-77r9

LOW 36

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00999 Published 2023-06-13 Fixed in 6.0.18, 7.0.7 +5 CWE-416

TI-2023-13731 CVE-2023-29337 · GHSA-6qmf-mmc7-6c2p

LOW 36

NuGet Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.01148 Published 2023-06-14 Fixed in 6.2.4, 6.4.2 +6 CWE-367