Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 556
Alerts This Week
Warning Icon 1 556

Ubuntu 22.10 & 22.04 LTS: USN-5798-1 Critical dotnet6 Denial Of Service

ubuntu
Calendar Grey January 10, 2023
Scroller Ubuntu
Mitigating dotnet6 failure potential in Ubuntu via critical patches, guaranteeing stability against deliberately manipulated network packets.
dotnet6 could be made to crash if it received specially crafted network traffic.

Summary

dotnet6 could be made to crash if it received specially crafted

network traffic.

Software Description:

- dotnet6: dotNET CLI tools and runtime

Details:

Johan Gorter discovered that .NET 6 incorrectly processed certain

invalid HTTP requests. An attacker could possibly use this issue to

cause a denial of service condition for an exposed endpoint.

Topics%20covered

Topics Covered

security advisory denial of service update critical Ubuntu network traffic dotnet6

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
   aspnetcore-runtime-6.0          6.0.113-0ubuntu1~22.10.1
   dotnet-host                             6.0.113-0ubuntu1~22.10.1
   dotnet-hostfxr-6.0                   6.0.113-0ubuntu1~22.10.1
   dotnet-runtime-6.0                  6.0.113-0ubuntu1~22.10.1
   dotnet-sdk-6.0                        6.0.113-0ubuntu1~22.10.1
   dotnet6                                   6.0.113-0ubuntu1~22.10.1

Ubuntu 22.04 LTS:
   aspnetcore-runtime-6.0         6.0.113-0ubuntu1~22.04.1
   dotnet-host                            6.0.113-0ubuntu1~22.04.1
   dotnet-hostfxr-6.0                  6.0.113-0ubuntu1~22.04.1
   dotnet-runtime-6.0                 6.0.113-0ubuntu1~22.04.1
   dotnet-sdk-6.0                       6.0.113-0ubuntu1~22.04.1
   dotnet6                                  6.0.113-0ubuntu1~22.04.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5798-1

CVE-2023-21538

Severity
critical
Lowest
Low
Medium
High
Critical

January 10, 2023

Topics%20covered

Topics Covered

security advisory denial of service update critical Ubuntu network traffic dotnet6

Package Information

https://launchpad.net/ubuntu/+source/dotnet6/6.0.113-0ubuntu1~22.10.1
https://launchpad.net/ubuntu/+source/dotnet6/6.0.113-0ubuntu1~22.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.