Red Hat Security Advisory

RHSA-2024:0157

.NET 7.0 security update

Released 2024-01-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) dotnet-sdk-7.0-source-built-artifacts-7.0.115-1.el8_9
Red Hat Enterprise Linux AppStream (v. 8) aspnetcore-runtime-7.0-7.0.15-1.el8_9, aspnetcore-targeting-pack-7.0-7.0.15-1.el8_9, dotnet-apphost-pack-7.0-7.0.15-1.el8_9 +6

TI-2024-00056 CVE-2024-0057 · GHSA-68w7-72jg-6qpp

MEDIUM 54

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02778 Published 2024-01-09 Fixed in 8.0.1, 7.0.15 +25 CWE-20

TI-2023-24860 CVE-2023-46233 · GHSA-xwcq-pm8m-c4vf

MEDIUM 48

crypto-js is a JavaScript library of crypto standards.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0064 Published 2023-10-25 Partial fix · 4.2.0 CWE-328

TI-2024-00055 CVE-2024-0056 · GHSA-98g6-xh36-x2p7

MEDIUM 42

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.0118 Published 2024-01-09 Fixed in 16.0.1110.1, 6.0.26 +17 CWE-319

TI-2024-14080 CVE-2024-21319 · GHSA-59j7-ghrg-fj52

LOW 35

Microsoft Identity Denial of service vulnerability

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.02892 Published 2024-01-09 Fixed in 6.0.26, 17.2.23 +8 CWE-20