PT-2023-3568 · Microsoft+7 · Visual Studio+8

Ethan Mckee-Harris + 2 · Publicado 2023-07-11 · Atualizado 2025-01-01 · CVE-2023-33170

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASP.NET and Visual Studio (affected versions not specified)

Description The issue is caused by synchronization errors when using a shared resource in the .NET platform and Microsoft Visual Studio. This can allow a remote attacker to bypass existing security restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

ALSA-2023:4057

ALSA-2023:4058

ALSA-2023:4059

ALSA-2023:4060

ALT-PU-2023-4590

ALT-PU-2023-4591

ALT-PU-2023-4592

ALT-PU-2023-4593

ALT-PU-2023-4594

ALT-PU-2023-4595

ALT-PU-2023-4610

ALT-PU-2023-4611

ALT-PU-2024-16792

ALT-PU-2024-16794

ALT-PU-2024-16796

ALT-PU-2024-16939

BDU:2023-03789

BIT-DOTNET-2023-33170

BIT-DOTNET-SDK-2023-33170

CESA-2023_4058

CESA-2023_4059

CVE-2023-33170

GHSA-25C8-P796-JG6R

RHSA-2023:4057

RHSA-2023:4058

RHSA-2023:4059

RHSA-2023:4060

RHSA-2023:4061

RHSA-2023:4448

RHSA-2023:4449

RHSA-2023_4057

RHSA-2023_4058

RHSA-2023_4059

RHSA-2023_4060

RLSA-2023:4058

RLSA-2023:4059

USN-6217-1

Produtos afetados

Alt Linux

Asp.Net

Almalinux

Centos

Linuxmint

Red Hat

Rocky Linux

Ubuntu

Visual Studio

Referências · 53

• https://github.com/dotnet/aspnetcore · Nota
• https://github.com/dotnet/aspnetcore/issues/49334 · Nota
• https://github.com/dotnet/aspnetcore/security/advisories/GHSA-25c8-p796-jg6r · Nota
• https://github.com/dotnet/announcements/issues/264 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/EVZVMMCCBBCSCPAW2CRQGOTKIHVFCMRO · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/O5CFOR6ID2HP45E7ZOGQNX76FPIWP7XR · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-33170 · Aviso do Fabricante
• https://bugzilla.redhat.com/2221854 · Nota
• https://cybersecurity-help.cz/vdb/SB2023071278 · Nota
• https://ubuntu.com/security/CVE-2023-33170 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-03789 · Nota de Segurança
• https://devblogs.microsoft.com/dotnet/july-2023-updates · Nota
• https://errata.almalinux.org/9/ALSA-2023-4060.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-33170 · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/TLWNIIA2I6YCYVCXYBPBRSZ3UH6KILTG · Aviso do Fabricante