.NET and Visual Studio Remote Code Execution Vulnerability

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• osv-coords24 versions

  pkg:bitnami/dotnetpkg:bitnami/dotnet-sdkpkg:nuget/microsoft.net.build.containerspkg:rpm/almalinux/aspnetcore-runtime-6.0pkg:rpm/almalinux/aspnetcore-runtime-7.0pkg:rpm/almalinux/aspnetcore-targeting-pack-6.0pkg:rpm/almalinux/aspnetcore-targeting-pack-7.0pkg:rpm/almalinux/dotnetpkg:rpm/almalinux/dotnet-apphost-pack-6.0pkg:rpm/almalinux/dotnet-apphost-pack-7.0pkg:rpm/almalinux/dotnet-hostpkg:rpm/almalinux/dotnet-hostfxr-6.0pkg:rpm/almalinux/dotnet-hostfxr-7.0pkg:rpm/almalinux/dotnet-runtime-6.0pkg:rpm/almalinux/dotnet-runtime-7.0pkg:rpm/almalinux/dotnet-sdk-6.0pkg:rpm/almalinux/dotnet-sdk-6.0-source-built-artifactspkg:rpm/almalinux/dotnet-sdk-7.0pkg:rpm/almalinux/dotnet-sdk-7.0-source-built-artifactspkg:rpm/almalinux/dotnet-targeting-pack-6.0pkg:rpm/almalinux/dotnet-targeting-pack-7.0pkg:rpm/almalinux/dotnet-templates-6.0pkg:rpm/almalinux/dotnet-templates-7.0pkg:rpm/almalinux/netstandard-targeting-pack-2.1

  >= 6.0.0, < 6.0.21+ 23 more

  • (no CPE)range: >= 6.0.0, < 6.0.21
  • (no CPE)range: >= 6.0.0, < 6.0.21
  • (no CPE)range: < 7.0.307
  • (no CPE)range: < 6.0.21-1.el9_2
  • (no CPE)range: < 7.0.10-1.el9_2
  • (no CPE)range: < 6.0.21-1.el9_2
  • (no CPE)range: < 7.0.10-1.el9_2
  • (no CPE)range: < 7.0.110-1.el8_8
  • (no CPE)range: < 6.0.21-1.el9_2
  • (no CPE)range: < 7.0.10-1.el9_2
  • (no CPE)range: < 7.0.10-1.el9_2
  • (no CPE)range: < 6.0.21-1.el9_2
  • (no CPE)range: < 7.0.10-1.el9_2
  • (no CPE)range: < 6.0.21-1.el9_2
  • (no CPE)range: < 7.0.10-1.el9_2
  • (no CPE)range: < 6.0.121-1.el9_2
  • (no CPE)range: < 6.0.121-1.el9_2
  • (no CPE)range: < 7.0.110-1.el9_2
  • (no CPE)range: < 7.0.110-1.el9_2
  • (no CPE)range: < 6.0.21-1.el9_2
  • (no CPE)range: < 7.0.10-1.el9_2
  • (no CPE)range: < 6.0.121-1.el9_2
  • (no CPE)range: < 7.0.110-1.el9_2
  • (no CPE)range: < 7.0.110-1.el9_2
• Microsoft/Microsoft Visual Studio 2022 version 17.2v5

  Range: 17.2.0
• Microsoft/Microsoft Visual Studio 2022 version 17.4v5

  Range: 17.4.0
• Microsoft/Microsoft Visual Studio 2022 version 17.6v5

  Range: 17.6.0
• Microsoft/.NET 6.0v5

  Range: 6.0.0
• Microsoft/.NET 7.0v5

  Range: 7.0.0

• github.com/advisories/GHSA-p8rx-fwgq-rh2fghsaADVISORY
• msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35390ghsavendor-advisoryWEB
• nvd.nist.gov/vuln/detail/CVE-2023-35390ghsaADVISORY
• github.com/dotnet/announcements/issues/266ghsaWEB
• github.com/dotnet/sdk/security/advisories/GHSA-p8rx-fwgq-rh2fghsaWEB
• lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CL2L4WE5QRT7WEXANYXSKSU43APC5N2VghsaWEB
• lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWVZFKTLNMNKPZ755EMRYIA6GHFOWGKYghsaWEB

No linked articles in our index yet.