USN-6959-1: .NET vulnerability
Published Aug 13, 2024
·Updated
It was discovered that .NET suffered from an information disclosure vulnerability. An attacker could potentially use this issue to read targeted email messages.
Affected Software
24 affected componentsFixes available
All of the following
ubuntu/aspnetcore-runtime-8.0<8.0.8-0ubuntu1~24.04.1
8.0.8-0ubuntu1~24.04.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/dotnet-host-8.0<8.0.8-0ubuntu1~24.04.1
8.0.8-0ubuntu1~24.04.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/dotnet-hostfxr-8.0<8.0.8-0ubuntu1~24.04.1
8.0.8-0ubuntu1~24.04.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/dotnet-runtime-8.0<8.0.8-0ubuntu1~24.04.1
8.0.8-0ubuntu1~24.04.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/dotnet-sdk-8.0<8.0.108-0ubuntu1~24.04.1
8.0.108-0ubuntu1~24.04.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/dotnet8<8.0.108-8.0.8-0ubuntu1~24.04.1
8.0.108-8.0.8-0ubuntu1~24.04.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/aspnetcore-runtime-8.0<8.0.8-0ubuntu1~22.04.1
8.0.8-0ubuntu1~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/dotnet-host-8.0<8.0.8-0ubuntu1~22.04.1
8.0.8-0ubuntu1~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/dotnet-hostfxr-8.0<8.0.8-0ubuntu1~22.04.1
8.0.8-0ubuntu1~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/dotnet-runtime-8.0<8.0.8-0ubuntu1~22.04.1
8.0.8-0ubuntu1~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/dotnet-sdk-8.0<8.0.108-0ubuntu1~22.04.1
8.0.108-0ubuntu1~22.04.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/dotnet8<8.0.108-8.0.8-0ubuntu1~22.04.1
8.0.108-8.0.8-0ubuntu1~22.04.1
Ubuntu Ubuntu=22.04
Event History
Aug 13, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-6959-1?
The severity of USN-6959-1 is classified as high due to the potential for information disclosure.
2
How do I fix USN-6959-1?
To fix USN-6959-1, upgrade to the latest versions of the affected packages listed in the vulnerability notice.
3
What products are affected by USN-6959-1?
USN-6959-1 affects various packages of .NET runtime and SDK on Ubuntu 22.04 and 24.04.
4
What type of vulnerability is USN-6959-1?
USN-6959-1 is an information disclosure vulnerability that could allow an attacker to read targeted email messages.
5
Is my system vulnerable if I use an affected version of .NET listed in USN-6959-1?
Yes, systems running affected versions of .NET are vulnerable and should be updated immediately.