Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 521
Alerts This Week
Warning Icon 1 521

Ubuntu 24.10 USN-7105-1 critical: dotnet9 code execution and DoS

ubuntu
Calendar Grey November 12, 2024
Scroller Ubuntu
Ubuntu has announced USN-7106-1, emphasizing critical Python updates because of several detected vulnerabilities.
Several security issues were fixed in .NET.

Summary

Several security issues were fixed in .NET.

Software Description:

- dotnet9: .NET CLI tools and runtime

Details:

It was discovered that the NrbfDecoder component in .NET did not properly

handle an instance of a type confusion vulnerability. An authenticated

attacker could possibly use this issue to gain the privileges of another

user and execute arbitrary code. (CVE-2024-43498)

It was discovered that the NrbfDecoder component in .NET did not properly

perform input validation. An unauthenticated remote attacker could possibly

use this issue to cause a denial of service. (CVE-2024-43499)

Topics%20covered

Topics Covered

security advisory code execution DoS Ubuntu dotnet9 NrbfDecoder

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   aspnetcore-runtime-9.0          9.0.0-rtm-0ubuntu1~24.10.1
   dotnet-host-9.0                 9.0.0-rtm-0ubuntu1~24.10.1
   dotnet-hostfxr-9.0              9.0.0-rtm-0ubuntu1~24.10.1
   dotnet-runtime-9.0              9.0.0-rtm-0ubuntu1~24.10.1
   dotnet-sdk-9.0                  9.0.100-rtm-0ubuntu1~24.10.1
   dotnet-sdk-aot-9.0              9.0.100-rtm-0ubuntu1~24.10.1
   dotnet9                         9.0.100-9.0.0-0ubuntu1~24.10.1

In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7105-1

  CVE-2024-43498, CVE-2024-43499

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7105-1

Topics%20covered

Topics Covered

security advisory code execution DoS Ubuntu dotnet9 NrbfDecoder

Package Information

https://launchpad.net/ubuntu/+source/dotnet9/9.0.100-9.0.0-0ubuntu1~24.10.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.