Red Hat Security Advisory

RHSA-2024:7869

.NET 8.0 security update

Released 2024-10-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) aspnetcore-runtime-8.0-8.0.10-1.el9_4, aspnetcore-runtime-dbg-8.0-8.0.10-1.el9_4, aspnetcore-targeting-pack-8.0-8.0.10-1.el9_4 +11
Red Hat Enterprise Linux CRB (v. 9) dotnet-sdk-8.0-source-built-artifacts-8.0.110-1.el9_4

TI-2024-29127 CVE-2024-43485 · GHSA-8g4q-xg66-9fp4

MEDIUM 44

.NET and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03078 Published 2024-10-08 Partial fix · 6.0.35, 8.0.10 +9 CWE-407

TI-2024-29126 CVE-2024-43484 · GHSA-f32c-w444-8ppv

MEDIUM 44

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02959 Published 2024-10-08 Partial fix · 6.0.35, 8.0.10 +16 CWE-407

TI-2024-29125 CVE-2024-43483 · GHSA-qj66-m88j-hmgj

MEDIUM 44

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02897 Published 2024-10-08 Partial fix · 6.0.35, 8.0.10 +17 CWE-407

TI-2024-25508 CVE-2024-38229 · GHSA-7vw9-cfwx-9gx9

MEDIUM 41

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02078 Published 2024-10-08 Partial fix · 8.0.10, 17.10.8 +4 CWE-416