Bitnami package

dotnet

pkg:bitnami/dotnet

Vulnerabilities (126)

CVE	Sev	CVSS	KEV	Affected versions	Fixed in	Published	Description
CVE-2023-36049	Hig	7.6		>= 6.0.0, < 6.0.25	6.0.25	Nov 14, 2023	.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-38171	Hig	7.5		>= 7.0.0, < 7.0.12	7.0.12	Oct 10, 2023	Microsoft QUIC Denial of Service Vulnerability
CVE-2023-36435	Hig	7.5		>= 7.0.0, < 7.0.13	7.0.13	Oct 10, 2023	Microsoft QUIC Denial of Service Vulnerability
CVE-2023-44487	Hig	7.5	KEV	>= 6.0.0, < 6.0.23	6.0.23	Oct 10, 2023	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-36799	Med	6.5		>= 6.0.0, < 6.0.1	6.0.1	Sep 12, 2023	.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2023-36796	Hig	7.8		>= 6.0.0, < 6.0.1	6.0.1	Sep 12, 2023	Visual Studio Remote Code Execution Vulnerability
CVE-2023-36794	Hig	7.8		>= 6.0.0, < 6.0.1	6.0.1	Sep 12, 2023	Visual Studio Remote Code Execution Vulnerability
CVE-2023-36793	Hig	7.8		>= 6.0.0, < 6.0.1	6.0.1	Sep 12, 2023	Visual Studio Remote Code Execution Vulnerability
CVE-2023-36792	Hig	7.8		>= 6.0.0, < 6.0.1	6.0.1	Sep 12, 2023	Visual Studio Remote Code Execution Vulnerability
CVE-2023-38180	Hig	7.5	KEV	>= 6.0.0, < 6.0.21	6.0.21	Aug 8, 2023	.NET and Visual Studio Denial of Service Vulnerability
CVE-2023-35391	Med	6.2		>= 6.0.0, < 6.0.21	6.0.21	Aug 8, 2023	ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
CVE-2023-38178	Hig	7.5		>= 6.0.0, < 6.0.1	6.0.1	Aug 8, 2023	.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2023-35390	Hig	7.8		>= 6.0.0, < 6.0.21	6.0.21	Aug 8, 2023	.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-33170	Hig	8.1		>= 6.0.0, < 6.0.20	6.0.20	Jul 11, 2023	ASP.NET and Visual Studio Security Feature Bypass Vulnerability
CVE-2023-33127	Hig	8.1		>= 6.0.0, < 6.0.20	6.0.20	Jul 11, 2023	.NET and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-29331	Hig	7.5		>= 6.0.0, < 6.0.1	6.0.1	Jun 14, 2023	.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2023-24936	Hig	7.5		>= 6.0.0, < 6.0.1	6.0.1	Jun 14, 2023	.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-24897	Hig	7.8		>= 6.0.0, < 6.0.1	6.0.1	Jun 14, 2023	.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2023-24895	Hig	7.8		>= 6.0.0, < 6.0.1	6.0.1	Jun 14, 2023	.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2023-33135	Hig	7.3		>= 6.0.0, < 6.0.18	6.0.18	Jun 14, 2023	.NET and Visual Studio Elevation of Privilege Vulnerability

CVE-2023-36049HigNov 14, 2023
affected >= 6.0.0, < 6.0.25fixed 6.0.25
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-38171HigOct 10, 2023
affected >= 7.0.0, < 7.0.12fixed 7.0.12
Microsoft QUIC Denial of Service Vulnerability
CVE-2023-36435HigOct 10, 2023
affected >= 7.0.0, < 7.0.13fixed 7.0.13
Microsoft QUIC Denial of Service Vulnerability
CVE-2023-44487HigKEVOct 10, 2023
affected >= 6.0.0, < 6.0.23fixed 6.0.23
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-36799MedSep 12, 2023
affected >= 6.0.0, < 6.0.1fixed 6.0.1
.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2023-36796HigSep 12, 2023
affected >= 6.0.0, < 6.0.1fixed 6.0.1
Visual Studio Remote Code Execution Vulnerability
CVE-2023-36794HigSep 12, 2023
affected >= 6.0.0, < 6.0.1fixed 6.0.1
Visual Studio Remote Code Execution Vulnerability
CVE-2023-36793HigSep 12, 2023
affected >= 6.0.0, < 6.0.1fixed 6.0.1
Visual Studio Remote Code Execution Vulnerability
CVE-2023-36792HigSep 12, 2023
affected >= 6.0.0, < 6.0.1fixed 6.0.1
Visual Studio Remote Code Execution Vulnerability
CVE-2023-38180HigKEVAug 8, 2023
affected >= 6.0.0, < 6.0.21fixed 6.0.21
.NET and Visual Studio Denial of Service Vulnerability
CVE-2023-35391MedAug 8, 2023
affected >= 6.0.0, < 6.0.21fixed 6.0.21
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
CVE-2023-38178HigAug 8, 2023
affected >= 6.0.0, < 6.0.1fixed 6.0.1
.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2023-35390HigAug 8, 2023
affected >= 6.0.0, < 6.0.21fixed 6.0.21
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-33170HigJul 11, 2023
affected >= 6.0.0, < 6.0.20fixed 6.0.20
ASP.NET and Visual Studio Security Feature Bypass Vulnerability
CVE-2023-33127HigJul 11, 2023
affected >= 6.0.0, < 6.0.20fixed 6.0.20
.NET and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-29331HigJun 14, 2023
affected >= 6.0.0, < 6.0.1fixed 6.0.1
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2023-24936HigJun 14, 2023
affected >= 6.0.0, < 6.0.1fixed 6.0.1
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-24897HigJun 14, 2023
affected >= 6.0.0, < 6.0.1fixed 6.0.1
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2023-24895HigJun 14, 2023
affected >= 6.0.0, < 6.0.1fixed 6.0.1
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
CVE-2023-33135HigJun 14, 2023
affected >= 6.0.0, < 6.0.18fixed 6.0.18
.NET and Visual Studio Elevation of Privilege Vulnerability

Page 5 of 7