USN-6773-1: .NET vulnerabilities

Q: What is the severity of USN-6773-1?

The severity of USN-6773-1 is critical due to the potential for remote code execution.

Q: How do I fix USN-6773-1?

To fix USN-6773-1, update the affected .NET packages to the latest version listed in the advisory.

Q: What versions of .NET are affected by USN-6773-1?

USN-6773-1 affects multiple versions of the .NET runtime and SDK on Ubuntu 22.04 and 24.04.

Q: What are the potential impacts of USN-6773-1?

The potential impacts of USN-6773-1 include unauthorized remote code execution, compromising system integrity.

Q: Is there a workaround for USN-6773-1?

No specific workaround is recommended for USN-6773-1; updating to the latest package version is necessary.

Published May 16, 2024

Updated

It was discovered that .NET did not properly handle memory in it's Double Parse routine. An attacker could possibly use this issue to achieve remote code execution. (CVE-2024-30045) It was discovered that .NET did not properly handle the usage of a shared resource. An attacker could possibly use this to cause a dead-lock condition, resulting in a denial of service. (CVE-2024-30046)

Affected Software

60 affected componentsFixes available

All of the following

ubuntu/aspnetcore-runtime-8.0<8.0.5-0ubuntu1~24.04.1

8.0.5-0ubuntu1~24.04.1

Ubuntu Ubuntu=24.04

All of the following

ubuntu/dotnet-host-8.0<8.0.5-0ubuntu1~24.04.1

8.0.5-0ubuntu1~24.04.1

Ubuntu Ubuntu=24.04

All of the following

ubuntu/dotnet-hostfxr-8.0<8.0.5-0ubuntu1~24.04.1

8.0.5-0ubuntu1~24.04.1

Ubuntu Ubuntu=24.04

All of the following

ubuntu/dotnet-runtime-8.0<8.0.5-0ubuntu1~24.04.1

8.0.5-0ubuntu1~24.04.1

Ubuntu Ubuntu=24.04

All of the following

ubuntu/dotnet-sdk-8.0<8.0.105-0ubuntu1~24.04.1

8.0.105-0ubuntu1~24.04.1

Ubuntu Ubuntu=24.04

All of the following

ubuntu/dotnet8<8.0.105-8.0.5-0ubuntu1~24.04.1

8.0.105-8.0.5-0ubuntu1~24.04.1

Ubuntu Ubuntu=24.04

All of the following

ubuntu/aspnetcore-runtime-7.0<7.0.119-0ubuntu1~23.10.1

7.0.119-0ubuntu1~23.10.1

Ubuntu Ubuntu=23.10

All of the following

ubuntu/aspnetcore-runtime-8.0<8.0.5-0ubuntu1~23.10.1

8.0.5-0ubuntu1~23.10.1

Ubuntu Ubuntu=23.10

All of the following

ubuntu/dotnet-host-7.0<7.0.119-0ubuntu1~23.10.1

7.0.119-0ubuntu1~23.10.1

Ubuntu Ubuntu=23.10

All of the following

ubuntu/dotnet-host-8.0<8.0.5-0ubuntu1~23.10.1

8.0.5-0ubuntu1~23.10.1

Ubuntu Ubuntu=23.10

All of the following

ubuntu/dotnet-hostfxr-7.0<7.0.119-0ubuntu1~23.10.1

7.0.119-0ubuntu1~23.10.1

Ubuntu Ubuntu=23.10

All of the following

ubuntu/dotnet-hostfxr-8.0<8.0.5-0ubuntu1~23.10.1

8.0.5-0ubuntu1~23.10.1

Ubuntu Ubuntu=23.10

All of the following

ubuntu/dotnet-runtime-7.0<7.0.119-0ubuntu1~23.10.1

7.0.119-0ubuntu1~23.10.1

Ubuntu Ubuntu=23.10

All of the following

ubuntu/dotnet-runtime-8.0<8.0.5-0ubuntu1~23.10.1

8.0.5-0ubuntu1~23.10.1

Ubuntu Ubuntu=23.10

All of the following

ubuntu/dotnet-sdk-7.0<7.0.119-0ubuntu1~23.10.1

7.0.119-0ubuntu1~23.10.1

Ubuntu Ubuntu=23.10

All of the following

ubuntu/dotnet-sdk-8.0<8.0.105-0ubuntu1~23.10.1

8.0.105-0ubuntu1~23.10.1

Ubuntu Ubuntu=23.10

All of the following

ubuntu/dotnet7<7.0.119-0ubuntu1~23.10.1

7.0.119-0ubuntu1~23.10.1

Ubuntu Ubuntu=23.10

All of the following

ubuntu/dotnet8<8.0.105-8.0.5-0ubuntu1~23.10.1

8.0.105-8.0.5-0ubuntu1~23.10.1

Ubuntu Ubuntu=23.10

All of the following

ubuntu/aspnetcore-runtime-7.0<7.0.119-0ubuntu1~22.04.1

7.0.119-0ubuntu1~22.04.1

Ubuntu Ubuntu=22.04

All of the following

ubuntu/aspnetcore-runtime-8.0<8.0.5-0ubuntu1~22.04.1

8.0.5-0ubuntu1~22.04.1

Ubuntu Ubuntu=22.04

All of the following

ubuntu/dotnet-host-7.0<7.0.119-0ubuntu1~22.04.1

7.0.119-0ubuntu1~22.04.1

Ubuntu Ubuntu=22.04

All of the following

ubuntu/dotnet-host-8.0<8.0.5-0ubuntu1~22.04.1

8.0.5-0ubuntu1~22.04.1

Ubuntu Ubuntu=22.04

All of the following

ubuntu/dotnet-hostfxr-7.0<7.0.119-0ubuntu1~22.04.1

7.0.119-0ubuntu1~22.04.1

Ubuntu Ubuntu=22.04

All of the following

ubuntu/dotnet-hostfxr-8.0<8.0.5-0ubuntu1~22.04.1

8.0.5-0ubuntu1~22.04.1

Ubuntu Ubuntu=22.04

All of the following

ubuntu/dotnet-runtime-7.0<7.0.119-0ubuntu1~22.04.1

7.0.119-0ubuntu1~22.04.1

Ubuntu Ubuntu=22.04

All of the following

ubuntu/dotnet-runtime-8.0<8.0.5-0ubuntu1~22.04.1

8.0.5-0ubuntu1~22.04.1

Ubuntu Ubuntu=22.04

All of the following

ubuntu/dotnet-sdk-7.0<7.0.119-0ubuntu1~22.04.1

7.0.119-0ubuntu1~22.04.1

Ubuntu Ubuntu=22.04

All of the following

ubuntu/dotnet-sdk-8.0<8.0.105-0ubuntu1~22.04.1

8.0.105-0ubuntu1~22.04.1

Ubuntu Ubuntu=22.04

All of the following

ubuntu/dotnet7<7.0.119-0ubuntu1~22.04.1

7.0.119-0ubuntu1~22.04.1

Ubuntu Ubuntu=22.04

All of the following

ubuntu/dotnet8<8.0.105-8.0.5-0ubuntu1~22.04.1

8.0.105-8.0.5-0ubuntu1~22.04.1

Ubuntu Ubuntu=22.04

Event History

May 16, 2024

Advisory Published

via Ubuntu·12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What is the severity of USN-6773-1?

The severity of USN-6773-1 is critical due to the potential for remote code execution.

How do I fix USN-6773-1?

To fix USN-6773-1, update the affected .NET packages to the latest version listed in the advisory.

What versions of .NET are affected by USN-6773-1?

USN-6773-1 affects multiple versions of the .NET runtime and SDK on Ubuntu 22.04 and 24.04.

What are the potential impacts of USN-6773-1?

The potential impacts of USN-6773-1 include unauthorized remote code execution, compromising system integrity.

Is there a workaround for USN-6773-1?

No specific workaround is recommended for USN-6773-1; updating to the latest package version is necessary.

USN-6773-1: .NET vulnerabilities

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What is the severity of USN-6773-1?

How do I fix USN-6773-1?

What versions of .NET are affected by USN-6773-1?

What are the potential impacts of USN-6773-1?

Is there a workaround for USN-6773-1?

Company

Resources

Contact