Red Hat Security Advisory

RHSA-2024:0152

.NET 8.0 security update

Released 2024-01-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) dotnet-sdk-8.0-source-built-artifacts-8.0.101-1.el9_3
Red Hat Enterprise Linux AppStream (v. 9) aspnetcore-runtime-8.0-8.0.1-1.el9_3, aspnetcore-targeting-pack-8.0-8.0.1-1.el9_3, dotnet-apphost-pack-8.0-8.0.1-1.el9_3 +8

TI-2024-00056 CVE-2024-0057 · GHSA-68w7-72jg-6qpp

MEDIUM 54

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02778 Published 2024-01-09 Fixed in 8.0.1, 7.0.15 +25 CWE-20

TI-2024-00055 CVE-2024-0056 · GHSA-98g6-xh36-x2p7

MEDIUM 42

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.0118 Published 2024-01-09 Fixed in 16.0.1110.1, 6.0.26 +17 CWE-319

TI-2024-14080 CVE-2024-21319 · GHSA-59j7-ghrg-fj52

LOW 35

Microsoft Identity Denial of service vulnerability

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.02892 Published 2024-01-09 Fixed in 6.0.26, 17.2.23 +8 CWE-20