.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• osv-coords33 versions

  pkg:bitnami/dotnetpkg:bitnami/dotnet-sdkpkg:nuget/system.net.requestspkg:rpm/almalinux/aspnetcore-runtime-6.0pkg:rpm/almalinux/aspnetcore-runtime-7.0pkg:rpm/almalinux/aspnetcore-runtime-8.0pkg:rpm/almalinux/aspnetcore-targeting-pack-6.0pkg:rpm/almalinux/aspnetcore-targeting-pack-7.0pkg:rpm/almalinux/aspnetcore-targeting-pack-8.0pkg:rpm/almalinux/dotnetpkg:rpm/almalinux/dotnet-apphost-pack-6.0pkg:rpm/almalinux/dotnet-apphost-pack-7.0pkg:rpm/almalinux/dotnet-apphost-pack-8.0pkg:rpm/almalinux/dotnet-hostpkg:rpm/almalinux/dotnet-hostfxr-6.0pkg:rpm/almalinux/dotnet-hostfxr-7.0pkg:rpm/almalinux/dotnet-hostfxr-8.0pkg:rpm/almalinux/dotnet-runtime-6.0pkg:rpm/almalinux/dotnet-runtime-7.0pkg:rpm/almalinux/dotnet-runtime-8.0pkg:rpm/almalinux/dotnet-sdk-6.0pkg:rpm/almalinux/dotnet-sdk-6.0-source-built-artifactspkg:rpm/almalinux/dotnet-sdk-7.0pkg:rpm/almalinux/dotnet-sdk-7.0-source-built-artifactspkg:rpm/almalinux/dotnet-sdk-8.0pkg:rpm/almalinux/dotnet-sdk-8.0-source-built-artifactspkg:rpm/almalinux/dotnet-targeting-pack-6.0pkg:rpm/almalinux/dotnet-targeting-pack-7.0pkg:rpm/almalinux/dotnet-targeting-pack-8.0pkg:rpm/almalinux/dotnet-templates-6.0pkg:rpm/almalinux/dotnet-templates-7.0pkg:rpm/almalinux/dotnet-templates-8.0pkg:rpm/almalinux/netstandard-targeting-pack-2.1

  >= 6.0.0, < 6.0.25+ 32 more

  • (no CPE)range: >= 6.0.0, < 6.0.25
  • (no CPE)range: >= 6.0.0, < 6.0.25
  • (no CPE)range: >= 8.0.0-rc.2.23480.2, < 8.0.0
  • (no CPE)range: < 6.0.25-1.el9_3
  • (no CPE)range: < 7.0.14-1.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 6.0.25-1.el9_3
  • (no CPE)range: < 7.0.14-1.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 8.0.100-2.el8_9
  • (no CPE)range: < 6.0.25-1.el9_3
  • (no CPE)range: < 7.0.14-1.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 6.0.25-1.el9_3
  • (no CPE)range: < 7.0.14-1.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 6.0.25-1.el9_3
  • (no CPE)range: < 7.0.14-1.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 6.0.125-1.el9_3
  • (no CPE)range: < 6.0.125-1.el9_3
  • (no CPE)range: < 7.0.114-1.el9_3
  • (no CPE)range: < 7.0.114-1.el9_3
  • (no CPE)range: < 8.0.100-2.el9_3
  • (no CPE)range: < 8.0.100-2.el9_3
  • (no CPE)range: < 6.0.25-1.el9_3
  • (no CPE)range: < 7.0.14-1.el9_3
  • (no CPE)range: < 8.0.0-2.el9_3
  • (no CPE)range: < 6.0.125-1.el9_3
  • (no CPE)range: < 7.0.114-1.el9_3
  • (no CPE)range: < 8.0.100-2.el9_3
  • (no CPE)range: < 8.0.100-2.el9_3
• Microsoft/.net Frameworkcpe-rescue12 versions

  2.0.0+ 11 more

  • (no CPE)range: 2.0.0
  • (no CPE)range: 3.0.0
  • (no CPE)range: 3.5.0
  • (no CPE)range: 3.5.0
  • (no CPE)range: 3.0.0.0
  • (no CPE)range: 10.0.0
  • (no CPE)range: 4.7.0
  • (no CPE)range: 4.8.0
  • (no CPE)range: 4.8.1
  • (no CPE)range: 4.7.0
  • (no CPE)range: 4.7.0
  • (no CPE)range: 4.8.0
• Microsoft/Microsoft Visual Studio 2022 version 17.2v5

  Range: 17.2.0
• Microsoft/Microsoft Visual Studio 2022 version 17.4v5

  Range: 17.4.0
• Microsoft/Microsoft Visual Studio 2022 version 17.6v5

  Range: 17.6.0
• Microsoft/Microsoft Visual Studio 2022 version 17.7v5

  Range: 17.7.0
• Microsoft/.NET 6.0v5

  Range: 6.0.0
• Microsoft/.NET 7.0v5

  Range: 7.0.0
• Microsoft/.NET 8.0v5

  Range: 8.0

• github.com/advisories/GHSA-c3hf-8vgx-72rhghsaADVISORY
• msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36049ghsavendor-advisoryWEB
• nvd.nist.gov/vuln/detail/CVE-2023-36049ghsaADVISORY
• github.com/dotnet/announcements/issues/287ghsaWEB
• github.com/dotnet/runtime/security/advisories/GHSA-c3hf-8vgx-72rhghsaWEB

No linked articles in our index yet.