PT-2023-3298 · Microsoft+7 · Net+9

Kevin Jones · Publicado 2023-06-13 · Atualizado 2024-12-13 · CVE-2023-29331

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions .NET, .NET Framework, and Visual Studio (affected versions not specified)

Description The issue is related to insufficient input validation, which can be exploited to cause a denial of service. This allows an attacker to affect the system. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

RCE

Enumeração de Fraquezas

CWE-400

CWE-20

Identificadores relacionados

ALSA-2023:3581

ALSA-2023:3582

ALSA-2023:3592

ALSA-2023:3593

ALT-PU-2023-4590

ALT-PU-2023-4591

ALT-PU-2023-4592

ALT-PU-2023-4593

ALT-PU-2023-4594

ALT-PU-2023-4595

ALT-PU-2023-4610

ALT-PU-2023-4611

ALT-PU-2024-16792

ALT-PU-2024-16794

ALT-PU-2024-16796

ALT-PU-2024-16939

BDU:2023-03439

BIT-DOTNET-2023-29331

BIT-DOTNET-SDK-2023-29331

CESA-2023_3582

CESA-2023_3593

CVE-2023-29331

GHSA-555C-2P6R-68MM

RHSA-2023:3580

RHSA-2023:3581

RHSA-2023:3582

RHSA-2023:3592

RHSA-2023:3593

RHSA-2023:4448

RHSA-2023:4449

RHSA-2023_3581

RHSA-2023_3582

RHSA-2023_3592

RHSA-2023_3593

RLSA-2023:3582

RLSA-2023:3593

USN-6161-1

USN-6161-2

Produtos afetados

.Net Framework

Alt Linux

Almalinux

Centos

Linuxmint

Net

Red Hat

Rocky Linux

Ubuntu

Visual Studio

Referências · 67

• https://github.com/dotnet/core/blob/c73158b8ef08db362585f9ed16b97c1d1372c666/release-notes/6.0/6.0.18/6.0.18.md · Nota
• https://github.com/dotnet/core/blob/c73158b8ef08db362585f9ed16b97c1d1372c666/release-notes/7.0/7.0.7/7.0.7.md · Nota
• https://github.com/dotnet/runtime · Nota
• https://github.com/dotnet/runtime/security/advisories/GHSA-555c-2p6r-68mm · Nota
• https://github.com/dotnet/announcements/issues/257 · Nota
• https://ubuntu.com/security/CVE-2023-29331 · Aviso do Fabricante
• https://errata.almalinux.org/8/ALSA-2023-3593.html · Aviso do Fabricante
• https://bugzilla.redhat.com/2212615 · Nota
• https://osv.dev/vulnerability/USN-6161-2 · Aviso do Fabricante
• https://bugzilla.redhat.com/2212617 · Nota
• https://ubuntu.com/security/CVE-2023-32032 · Aviso do Fabricante
• https://support.microsoft.com/kb/5025823 · Nota
• https://osv.dev/vulnerability/RLSA-2023:3582 · Aviso do Fabricante
• https://t.me/avleonovcom/1112 · Publicação no Telegram
• https://access.redhat.com/security/cve/CVE-2023-29337 · Nota