Linux · Security advisory · August 31, 2023

RLSA-2023:3593: dotnet7.0 security update

RLSA-2023:3593, released August 31, 2023, fixes 5 CVEs in dotnet7.0 (version 0:7.0.107-1.el8_8). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0263

85th percentile

Priority of the 5 CVEs

Patch now 0
                                Urgent 0
                                High 5
                                Routine 0

Fixed package versions

Product	Release	Fixed in
dotnet7.0	rocky 8	0:7.0.107-1.el8_8

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2023-29331	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability	7.5	0.0263	Exploitation Less Likely
High	CVE-2023-24936	.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability	7.5	0.0156	Exploitation Less Likely
High	CVE-2023-29337	NuGet Client Remote Code Execution Vulnerability	7.5	0.0115	Exploitation Less Likely
High	CVE-2023-33128	.NET and Visual Studio Remote Code Execution Vulnerability	7.5	0.0100	Exploitation Less Likely
High	CVE-2023-32032	.NET and Visual Studio Elevation of Privilege Vulnerability	7.5	0.0060	Exploitation Less Likely

Also fixes CVE-2023-29331

KB5027219
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems and 8 more
PowerShell Preview 7.4.0.1
PowerShell Preview
KB5027230
Microsoft .NET Framework 3.5 and 4.6.2 on Windows 10 for 32-bit Systems, Microsoft .NET Framework 3.5 and 4.6.2 on Windows 10 for x64-based Systems, Windows 10 for 32-bit Systems and 1 more
KB5027798
.NET 7.0
KB5027119
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for x64-based Systems
KB5027531
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1, Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 and 3 more
KB5027532
Microsoft .NET Framework 3.5 on Windows Server 2012, Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation), Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 and 3 more
KB5027533
Microsoft .NET Framework 3.5 on Windows Server 2012 R2, Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation), Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 and 3 more

Vendor advisory

https://errata.rockylinux.org/RLSA-2023:3593

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo