what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Ubuntu Security Notice USN-6578-1

Ubuntu Security Notice USN-6578-1
Posted Jan 11, 2024
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6578-1 - Vishal Mishra and Anita Gaud discovered that .NET did not properly validate X.509 certificates with malformed signatures. An attacker could possibly use this issue to bypass an application's typical authentication logic. Morgan Brown discovered that .NET did not properly handle requests from unauthenticated clients. An attacker could possibly use this issue to cause a denial of service.

tags | advisory, denial of service
systems | linux, ubuntu
advisories | CVE-2024-0057, CVE-2024-21319
SHA-256 | 1a5ffa31cec024f4e71d57b72c2f478574b69113780d92f067efda5d9346b0e0

Ubuntu Security Notice USN-6578-1

Change Mirror Download
==========================================================================
Ubuntu Security Notice USN-6578-1
January 11, 2024

dotnet6, dotnet7, dotnet8 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 23.10
- Ubuntu 23.04
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in dotnet6, dotnet7, and dotnet8.

Software Description:
- dotnet6: dotNET CLI tools and runtime
- dotnet7: dotNET CLI tools and runtime
- dotnet8: dotNET CLI tools and runtime

Details:

Vishal Mishra and Anita Gaud discovered that .NET did not properly
validate X.509 certificates with malformed signatures. An attacker
could possibly use this issue to bypass an application's typical
authentication logic. (CVE-2024-0057)

Morgan Brown discovered that .NET did not properly handle requests from
unauthenticated clients. An attacker could possibly use this issue to
cause a denial of service. (CVE-2024-21319)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
aspnetcore-runtime-6.0 6.0.126-0ubuntu1~23.10.1
aspnetcore-runtime-7.0 7.0.115-0ubuntu1~23.10.1
aspnetcore-runtime-8.0 8.0.1-0ubuntu1~23.10.1
dotnet-host 6.0.126-0ubuntu1~23.10.1
dotnet-host-7.0 7.0.115-0ubuntu1~23.10.1
dotnet-host-8.0 8.0.1-0ubuntu1~23.10.1
dotnet-hostfxr-6.0 6.0.126-0ubuntu1~23.10.1
dotnet-hostfxr-7.0 7.0.115-0ubuntu1~23.10.1
dotnet-hostfxr-8.0 8.0.1-0ubuntu1~23.10.1
dotnet-runtime-6.0 6.0.126-0ubuntu1~23.10.1
dotnet-runtime-7.0 7.0.115-0ubuntu1~23.10.1
dotnet-runtime-8.0 8.0.1-0ubuntu1~23.10.1
dotnet-sdk-6.0 6.0.126-0ubuntu1~23.10.1
dotnet-sdk-7.0 7.0.115-0ubuntu1~23.10.1
dotnet-sdk-8.0 8.0.101-0ubuntu1~23.10.1
dotnet6 6.0.126-0ubuntu1~23.10.1
dotnet7 7.0.115-0ubuntu1~23.10.1
dotnet8 8.0.101-8.0.1-0ubuntu1~23.10.1

Ubuntu 23.04:
aspnetcore-runtime-6.0 6.0.126-0ubuntu1~23.04.1
aspnetcore-runtime-7.0 7.0.115-0ubuntu1~23.04.1
dotnet-host 6.0.126-0ubuntu1~23.04.1
dotnet-host-7.0 7.0.115-0ubuntu1~23.04.1
dotnet-hostfxr-6.0 6.0.126-0ubuntu1~23.04.1
dotnet-hostfxr-7.0 7.0.115-0ubuntu1~23.04.1
dotnet-runtime-6.0 6.0.126-0ubuntu1~23.04.1
dotnet-runtime-7.0 7.0.115-0ubuntu1~23.04.1
dotnet-sdk-6.0 6.0.126-0ubuntu1~23.04.1
dotnet-sdk-7.0 7.0.115-0ubuntu1~23.04.1
dotnet6 6.0.126-0ubuntu1~23.04.1
dotnet7 7.0.115-0ubuntu1~23.04.1

Ubuntu 22.04 LTS:
aspnetcore-runtime-6.0 6.0.126-0ubuntu1~22.04.1
aspnetcore-runtime-7.0 7.0.115-0ubuntu1~22.04.1
dotnet-host 6.0.126-0ubuntu1~22.04.1
dotnet-host-7.0 7.0.115-0ubuntu1~22.04.1
dotnet-hostfxr-6.0 6.0.126-0ubuntu1~22.04.1
dotnet-hostfxr-7.0 7.0.115-0ubuntu1~22.04.1
dotnet-runtime-6.0 6.0.126-0ubuntu1~22.04.1
dotnet-runtime-7.0 7.0.115-0ubuntu1~22.04.1
dotnet-sdk-6.0 6.0.126-0ubuntu1~22.04.1
dotnet-sdk-7.0 7.0.115-0ubuntu1~22.04.1
dotnet6 6.0.126-0ubuntu1~22.04.1
dotnet7 7.0.115-0ubuntu1~22.04.1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-6578-1
CVE-2024-0057, CVE-2024-21319

Package Information:
https://launchpad.net/ubuntu/+source/dotnet6/6.0.126-0ubuntu1~23.10.1
https://launchpad.net/ubuntu/+source/dotnet7/7.0.115-0ubuntu1~23.10.1
https://launchpad.net/ubuntu/+source/dotnet8/8.0.101-8.0.1-0ubuntu1~23.10.1
https://launchpad.net/ubuntu/+source/dotnet6/6.0.126-0ubuntu1~23.04.1
https://launchpad.net/ubuntu/+source/dotnet7/7.0.115-0ubuntu1~23.04.1
https://launchpad.net/ubuntu/+source/dotnet6/6.0.126-0ubuntu1~22.04.1
https://launchpad.net/ubuntu/+source/dotnet7/7.0.115-0ubuntu1~22.04.1
Login or Register to add favorites

File Archive:

May 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    44 Files
  • 2
    May 2nd
    5 Files
  • 3
    May 3rd
    11 Files
  • 4
    May 4th
    0 Files
  • 5
    May 5th
    0 Files
  • 6
    May 6th
    28 Files
  • 7
    May 7th
    3 Files
  • 8
    May 8th
    4 Files
  • 9
    May 9th
    54 Files
  • 10
    May 10th
    12 Files
  • 11
    May 11th
    0 Files
  • 12
    May 12th
    0 Files
  • 13
    May 13th
    17 Files
  • 14
    May 14th
    11 Files
  • 15
    May 15th
    17 Files
  • 16
    May 16th
    13 Files
  • 17
    May 17th
    22 Files
  • 18
    May 18th
    0 Files
  • 19
    May 19th
    0 Files
  • 20
    May 20th
    0 Files
  • 21
    May 21st
    0 Files
  • 22
    May 22nd
    0 Files
  • 23
    May 23rd
    0 Files
  • 24
    May 24th
    0 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    0 Files
  • 28
    May 28th
    0 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close