Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Ubuntu 24.10 USN-7105-1 critical: dotnet9 code execution and DoS

ubuntu
Calendar Grey November 12, 2024
Dist Ubuntu Esm H88
Ubuntu has announced USN-7106-1, emphasizing critical Python updates because of several detected vulnerabilities.
Several security issues were fixed in .NET.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 Summary: Several security issues were fixed in .NET. Software Description: - dotnet9: .NET CLI tools and runtime Details: It was discovered that the NrbfDecoder component in .NET did not properly handle an instance of a type confusion vulnerability. An authenticated attacker could possibly use this issue to gain the privileges of another user and execute arbitrary code. (CVE-2024-43498) It was discovered that the NrbfDecoder component in .NET did not properly perform input validation. An unauthenticated remote attacker could possibly use this issue to cause a denial of service. (CVE-2024-43499)

Topics%20covered

Topics Covered

security advisory code execution DoS Ubuntu dotnet9 NrbfDecoder

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10   aspnetcore-runtime-9.0          9.0.0-rtm-0ubuntu1~24.10.1   dotnet-host-9.0                 9.0.0-rtm-0ubuntu1~24.10.1   dotnet-hostfxr-9.0              9.0.0-rtm-0ubuntu1~24.10.1   dotnet-runtime-9.0              9.0.0-rtm-0ubuntu1~24.10.1   dotnet-sdk-9.0                  9.0.100-rtm-0ubuntu1~24.10.1   dotnet-sdk-aot-9.0              9.0.100-rtm-0ubuntu1~24.10.1   dotnet9                         9.0.100-9.0.0-0ubuntu1~24.10.1 In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7105-1

  CVE-2024-43498, CVE-2024-43499

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7105-1

Topics%20covered

Topics Covered

security advisory code execution DoS Ubuntu dotnet9 NrbfDecoder

Package Information

https://launchpad.net/ubuntu/+source/dotnet9/9.0.100-9.0.0-0ubuntu1~24.10.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here