Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:4438

Опубликовано: 07 мая 2025
Источник: rocky
Оценка: Moderate

Описание

Moderate: dotnet6.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.132 and Runtime 6.0.32.

Security Fix(es):

  • dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
dotnet-hostfxr-6.0x86_641.el8_10dotnet-hostfxr-6.0-6.0.32-1.el8_10.x86_64.rpm
aspnetcore-runtime-6.0x86_641.el8_10aspnetcore-runtime-6.0-6.0.32-1.el8_10.x86_64.rpm
aspnetcore-targeting-pack-6.0x86_641.el8_10aspnetcore-targeting-pack-6.0-6.0.32-1.el8_10.x86_64.rpm
dotnet-apphost-pack-6.0x86_641.el8_10dotnet-apphost-pack-6.0-6.0.32-1.el8_10.x86_64.rpm
dotnet-runtime-6.0x86_641.el8_10dotnet-runtime-6.0-6.0.32-1.el8_10.x86_64.rpm
dotnet-sdk-6.0x86_641.el8_10dotnet-sdk-6.0-6.0.132-1.el8_10.x86_64.rpm
dotnet-targeting-pack-6.0x86_641.el8_10dotnet-targeting-pack-6.0-6.0.32-1.el8_10.x86_64.rpm
dotnet-templates-6.0x86_641.el8_10dotnet-templates-6.0-6.0.132-1.el8_10.x86_64.rpm

Показывать по

Связанные CVE

CVE-2024-38095

Ссылки на источники

Исправления

Связанные уязвимости

ubuntu логотип

CVE-2024-38095

CVSS3: 7.5
ubuntu
около 1 года назад

.NET and Visual Studio Denial of Service Vulnerability

redhat логотип

CVE-2024-38095

CVSS3: 5.3
redhat
около 1 года назад

.NET and Visual Studio Denial of Service Vulnerability

nvd логотип

CVE-2024-38095

CVSS3: 7.5
nvd
около 1 года назад

.NET and Visual Studio Denial of Service Vulnerability

msrc логотип

CVE-2024-38095

CVSS3: 7.5
msrc
около 1 года назад

.NET and Visual Studio Denial of Service Vulnerability

github логотип

GHSA-447r-wph3-92pm

CVSS3: 7.5
github
около 1 года назад

Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability