Ubuntu: 6773-1 Critical: .NET Remote Execution and DoS Threats

ubuntu

May 16, 2024

Several security issues were fixed in .NET.

Summary

Several security issues were fixed in .NET.

Software Description:

- dotnet8: .NET CLI tools and runtime

- dotnet7: .NET CLI tools and runtime

Details:

It was discovered that .NET did not properly handle memory in it's

Double Parse routine. An attacker could possibly use this issue to

achieve remote code execution. (CVE-2024-30045)

It was discovered that .NET did not properly handle the usage of a

shared resource. An attacker could possibly use this to cause a dead-lock

condition, resulting in a denial of service. (CVE-2024-30046)

Topics Covered

security advisory denial of service remote execution ubuntu 23.10 ubuntu 22.04 dotnet issue ubuntu 24.04

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
   aspnetcore-runtime-8.0          8.0.5-0ubuntu1~24.04.1
   dotnet-host-8.0                 8.0.5-0ubuntu1~24.04.1
   dotnet-hostfxr-8.0              8.0.5-0ubuntu1~24.04.1
   dotnet-runtime-8.0              8.0.5-0ubuntu1~24.04.1
   dotnet-sdk-8.0                  8.0.105-0ubuntu1~24.04.1
   dotnet8                         8.0.105-8.0.5-0ubuntu1~24.04.1

Ubuntu 23.10
   aspnetcore-runtime-7.0          7.0.119-0ubuntu1~23.10.1
   aspnetcore-runtime-8.0          8.0.5-0ubuntu1~23.10.1
   dotnet-host-7.0                 7.0.119-0ubuntu1~23.10.1
   dotnet-host-8.0                 8.0.5-0ubuntu1~23.10.1
   dotnet-hostfxr-7.0              7.0.119-0ubuntu1~23.10.1
   dotnet-hostfxr-8.0              8.0.5-0ubuntu1~23.10.1
   dotnet-runtime-7.0              7.0.119-0ubuntu1~23.10.1
   dotnet-runtime-8.0              8.0.5-0ubuntu1~23.10.1
   dotnet-sdk-7.0                  7.0.119-0ubuntu1~23.10.1
   dotnet-sdk-8.0                  8.0.105-0ubuntu1~23.10.1
   dotnet7                         7.0.119-0ubuntu1~23.10.1
   dotnet8                         8.0.105-8.0.5-0ubuntu1~23.10.1

Ubuntu 22.04 LTS
   aspnetcore-runtime-7.0          7.0.119-0ubuntu1~22.04.1
   aspnetcore-runtime-8.0          8.0.5-0ubuntu1~22.04.1
   dotnet-host-7.0                 7.0.119-0ubuntu1~22.04.1
   dotnet-host-8.0                 8.0.5-0ubuntu1~22.04.1
   dotnet-hostfxr-7.0              7.0.119-0ubuntu1~22.04.1
   dotnet-hostfxr-8.0              8.0.5-0ubuntu1~22.04.1
   dotnet-runtime-7.0              7.0.119-0ubuntu1~22.04.1
   dotnet-runtime-8.0              8.0.5-0ubuntu1~22.04.1
   dotnet-sdk-7.0                  7.0.119-0ubuntu1~22.04.1
   dotnet-sdk-8.0                  8.0.105-0ubuntu1~22.04.1
   dotnet7                         7.0.119-0ubuntu1~22.04.1
   dotnet8                         8.0.105-8.0.5-0ubuntu1~22.04.1

In general, a standard system update will make all the necessary changes.