REDHAT-BUG-2248883: CRLF Injection
First published: Thu Nov 09 2023(Updated: )
<a href="https://access.redhat.com/security/cve/CVE-2023-36049">CVE-2023-36049</a> - Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand Microsoft .NET FormatFtpCommand CRLF Injection Arbitrary File Write and Deletion Vulnerability Affected versions: .NET 6.0 .NET 7.0 .NET 8.0
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft .NET Framework | >=6.0<=8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2023-36049
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36049
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2249767
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2249768
- https://access.redhat.com/errata/RHSA-2023:7253
- https://access.redhat.com/errata/RHSA-2023:7259
- https://access.redhat.com/errata/RHSA-2023:7255
- https://access.redhat.com/errata/RHSA-2023:7257
- https://access.redhat.com/errata/RHSA-2023:7254
- https://access.redhat.com/errata/RHSA-2023:7256
- https://access.redhat.com/errata/RHSA-2023:7258
- https://bugzilla.redhat.com/show_bug.cgi?id=2248883
Frequently Asked Questions
What is the severity of REDHAT-BUG-2248883?
REDHAT-BUG-2248883 is classified as a high severity vulnerability due to its potential for arbitrary file write and deletion.
How do I fix REDHAT-BUG-2248883?
To fix REDHAT-BUG-2248883, upgrade to a patched version of .NET, either .NET 8.0, .NET 7.0, or .NET 6.0 that addresses CVE-2023-36049.
Which versions of .NET are affected by REDHAT-BUG-2248883?
REDHAT-BUG-2248883 affects .NET versions 6.0, 7.0, and 8.0.
What kind of attacks can REDHAT-BUG-2248883 facilitate?
REDHAT-BUG-2248883 can facilitate attacks that allow an attacker to write and delete files arbitrarily on a vulnerable system.
What is CVE-2023-36049 related to REDHAT-BUG-2248883?
CVE-2023-36049 is the specific identifier for the arbitrary file write and deletion vulnerability described in REDHAT-BUG-2248883.
- agent/references
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/severity
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-36049
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft .net framework