Home[1] Files[2] News[3] &[SERVICES_TAB] Contact[4] Add New[5]
- Ubuntu Security Notice USN-6693-1[6]
- Authored by Ubuntu[7] | Site security.ubuntu.com[8]
-
Ubuntu Security Notice 6693-1 - It was discovered that .NET did not properly handle certain specially crafted requests. An attacker could potentially use this issue to cause a resource leak, leading to a denial of service.
- systems | linux[9], ubuntu[10]
- advisories | CVE-2024-21392[11]
- SHA-256 |
8a6cbb24e79abc77c05ef916a922d0685d249ebcb25ec7dbe3505f1a201ccbf7
- Download[12] | Favorite[13] | View[14]
Change Mirror[15] Download[16]
==========================================================================
Ubuntu Security Notice USN-6693-1
March 12, 2024
dotnet7, dotnet8 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.10
- Ubuntu 22.04 LTS
Summary:
.NET could be made to crash if it processed specially crafted requests.
Software Description:
- dotnet7: .NET CLI tools and runtime
- dotnet8: .NET CLI tools and runtime
Details:
It was discovered that .NET did not properly handle certain specially
crafted requests. An attacker could potentially use this issue to cause
a resource leak, leading to a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.10:
aspnetcore-runtime-7.0 7.0.117-0ubuntu1~23.10.1
aspnetcore-runtime-8.0 8.0.3-0ubuntu1~23.10.1
dotnet-runtime-7.0 7.0.117-0ubuntu1~23.10.1
dotnet-runtime-8.0 8.0.3-0ubuntu1~23.10.1
dotnet7 7.0.117-0ubuntu1~23.10.1
dotnet8 8.0.103-8.0.3-0ubuntu1~23.10.1
Ubuntu 22.04 LTS:
aspnetcore-runtime-7.0 7.0.117-0ubuntu1~22.04.1
aspnetcore-runtime-8.0 8.0.3-0ubuntu1~22.04.1
dotnet-runtime-7.0 7.0.117-0ubuntu1~22.04.1
dotnet-runtime-8.0 8.0.3-0ubuntu1~22.04.1
dotnet7 7.0.117-0ubuntu1~22.04.1
dotnet8 8.0.103-8.0.3-0ubuntu1~22.04.1
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6693-1
CVE-2024-21392
Package Information:
https://launchpad.net/ubuntu/+source/dotnet7/7.0.117-0ubuntu1~23.10.1
https://launchpad.net/ubuntu/+source/dotnet8/8.0.103-8.0.3-0ubuntu1~23.10.1
https://launchpad.net/ubuntu/+source/dotnet7/7.0.117-0ubuntu1~22.04.1
https://launchpad.net/ubuntu/+source/dotnet8/8.0.103-8.0.3-0ubuntu1~22.04.1
File Tags
- ActiveX[22] (933)
- Advisory[23] (84,456)
- Arbitrary[24] (16,594)
- BBS[25] (2,859)
- Bypass[26] (1,822)
- CGI[27] (1,032)
- Code Execution[28] (7,588)
- Conference[29] (687)
- Cracker[30] (844)
- CSRF[31] (3,370)
- DoS[32] (24,408)
- Encryption[33] (2,383)
- Exploit[34] (52,647)
- File Inclusion[35] (4,247)
- File Upload[36] (982)
- Firewall[37] (822)
- Info Disclosure[38] (2,834)
- Intrusion Detection[39] (905)
- Java[40] (3,117)
- JavaScript[41] (888)
- Kernel[42] (6,959)
- Local[43] (14,668)
- Magazine[44] (586)
- Overflow[45] (12,996)
- Perl[46] (1,430)
- PHP[47] (5,178)
- Proof of Concept[48] (2,364)
- Protocol[49] (3,688)
- Python[50] (1,595)
- Remote[51] (31,320)
- Root[52] (3,615)
- Rootkit[53] (519)
- Ruby[54] (617)
- Scanner[55] (1,648)
- Security Tool[56] (7,966)
- Shell[57] (3,239)
- Shellcode[58] (1,217)
- Sniffer[59] (899)
- Spoof[60] (2,255)
- SQL Injection[61] (16,498)
- TCP[62] (2,421)
- Trojan[63] (688)
- UDP[64] (896)
- Virus[65] (668)
- Vulnerability[66] (32,483)
- Web[67] (9,844)
- Whitepaper[68] (3,770)
- x86[69] (966)
- XSS[70] (18,133)
- Other[71]
File Archives
- March 2024[72]
- February 2024[73]
- January 2024[74]
- December 2023[75]
- November 2023[76]
- October 2023[77]
- September 2023[78]
- August 2023[79]
- July 2023[80]
- June 2023[81]
- May 2023[82]
- April 2023[83]
- Older[84]
Systems
- AIX[85] (429)
- Apple[86] (2,060)
- BSD[87] (375)
- CentOS[88] (57)
- Cisco[89] (1,927)
- Debian[90] (6,981)
- Fedora[91] (1,693)
- FreeBSD[92] (1,246)
- Gentoo[93] (4,466)
- HPUX[94] (880)
- iOS[95] (369)
- iPhone[96] (108)
- IRIX[97] (220)
- Juniper[98] (69)
- Linux[99] (48,873)
- Mac OS X[100] (691)
- Mandriva[101] (3,105)
- NetBSD[102] (256)
- OpenBSD[103] (488)
- RedHat[104] (15,260)
- Slackware[105] (941)
- Solaris[106] (1,611)
- SUSE[107] (1,444)
- Ubuntu[108] (9,361)
- UNIX[109] (9,374)
- UnixWare[110] (187)
- Windows[111] (6,637)
- Other[112]
- Services
- Security Services[123]
- Hosting By
- Rokasec[124]
Read more https://packetstormsecurity.com/files/177569/USN-6693-1.txt