PT-2023-9611 · Microsoft+7 · Visual Studio+8

Publicado 2023-06-13 · Atualizado 2024-12-13 · CVE-2023-33128

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft .NET and Visual Studio (affected versions not specified)

Description The issue is related to a use-after-free memory vulnerability in the Microsoft .NET platform and the Visual Studio source code editor. Exploitation of this issue may allow an attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALSA-2023:3581

ALSA-2023:3582

ALSA-2023:3592

ALSA-2023:3593

ALT-PU-2023-4590

ALT-PU-2023-4591

ALT-PU-2023-4592

ALT-PU-2023-4593

ALT-PU-2023-4594

ALT-PU-2023-4595

ALT-PU-2023-4610

ALT-PU-2023-4611

ALT-PU-2024-16792

ALT-PU-2024-16794

ALT-PU-2024-16796

ALT-PU-2024-16939

BDU:2024-08771

BIT-DOTNET-2023-33128

BIT-DOTNET-SDK-2023-33128

CESA-2023_3582

CESA-2023_3593

CVE-2023-33128

GHSA-X469-CV7M-77R9

RHSA-2023:3580

RHSA-2023:3581

RHSA-2023:3582

RHSA-2023:3592

RHSA-2023:3593

RHSA-2023:4448

RHSA-2023:4449

RHSA-2023_3581

RHSA-2023_3582

RHSA-2023_3592

RHSA-2023_3593

RLSA-2023:3582

RLSA-2023:3593

USN-6161-1

USN-6161-2

Produtos afetados

Alt Linux

Almalinux

Centos

Linuxmint

.Net Framework

Red Hat

Rocky Linux

Ubuntu

Visual Studio

Referências · 60

• https://github.com/dotnet/core/blob/c73158b8ef08db362585f9ed16b97c1d1372c666/release-notes/7.0/7.0.7/7.0.7.md · Nota
• https://github.com/dotnet/core/blob/c73158b8ef08db362585f9ed16b97c1d1372c666/release-notes/6.0/6.0.18/6.0.18.md · Nota
• https://github.com/dotnet/sdk/security/advisories/GHSA-x469-cv7m-77r9 · Nota
• https://github.com/dotnet/sdk · Nota
• https://github.com/dotnet/announcements/issues/253 · Nota
• https://access.redhat.com/security/cve/CVE-2023-29337 · Nota
• https://ubuntu.com/security/CVE-2023-24936 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=2213703 · Nota
• https://cve.org/CVERecord?id=CVE-2023-33128 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2023-29331 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-33128 · Aviso do Fabricante
• https://errata.almalinux.org/9/ALSA-2023-3592.html · Aviso do Fabricante
• https://errata.almalinux.org/9/ALSA-2023-3581.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-33128 · Aviso do Fabricante
• https://bugzilla.redhat.com/2212615 · Nota