Known vulnerabilities in dotnet-hostfxr-8.0 (Ubuntu package)

Vendor: Canonical Ltd.
Software: dotnet-hostfxr-8.0 (Ubuntu package)
Software CPE: cpe:2.3:o:canonical:dotnet-hostfxr-8.0_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 52
Public exploits: 1
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dotnet-hostfxr-8.0 (Ubuntu package) dotnet-hostfxr-8.0 (Ubuntu package) is affected by 52 known vulnerabilities: 12 high, 33 medium, 7 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105568 - Improper Authentication
CVE-2025-24070		 CWE-287 High
No
No
 8.0.14-0ubuntu1~22.04.1, 8.0.14-0ubuntu1~24.04.1, 8.0.14-0ubuntu1~24.10.1 11.03.2025 SB20250311101
SB2025031215
SB2025031778
and 4 more
#VU102804 - Integer overflow
CVE-2025-21172		 CWE-190 Medium
No
No
 8.0.12-0ubuntu1~22.04.1, 8.0.12-0ubuntu1~24.04.1, 8.0.12-0ubuntu1~24.10.1 15.01.2025 SB2025011548
SB2025011647
SB2025011671
and 6 more
#VU102801 - Heap-based Buffer Overflow
CVE-2025-21171		 CWE-122 Medium
No
No
 8.0.12-0ubuntu1~22.04.1, 8.0.12-0ubuntu1~24.04.1, 8.0.12-0ubuntu1~24.10.1 15.01.2025 SB2025011545
SB2025011647
SB2025011672
and 2 more
#VU102800 - Creation of Temporary File in Directory with Insecure Permissions
CVE-2025-21173		 CWE-379 Low
No
No
 8.0.12-0ubuntu1~22.04.1, 8.0.12-0ubuntu1~24.04.1, 8.0.12-0ubuntu1~24.10.1 15.01.2025 SB2025011545
SB2025011647
SB2025011671
and 6 more
#VU102784 - Out-of-bounds read
CVE-2025-21176		 CWE-125 High
No
No
 8.0.12-0ubuntu1~22.04.1, 8.0.12-0ubuntu1~24.04.1, 8.0.12-0ubuntu1~24.10.1 15.01.2025 SB2025011536
SB2025011647
SB2025011671
and 6 more
#VU98277 - Inefficient Algorithmic Complexity
CVE-2024-43484		 CWE-407 Medium
No
No
 8.0.10-0ubuntu1~22.04.1, 8.0.10-0ubuntu1~24.04.1 09.10.2024 SB2024100939
SB2024100946
SB2024100978
and 10 more
#VU98276 - Inefficient Algorithmic Complexity
CVE-2024-43483		 CWE-407 Medium
No
No
 8.0.10-0ubuntu1~22.04.1, 8.0.10-0ubuntu1~24.04.1 09.10.2024 SB2024100939
SB2024100946
SB2024100978
and 12 more
#VU98267 - Inefficient Algorithmic Complexity
CVE-2024-43485		 CWE-407 Medium
No
No
 8.0.10-0ubuntu1~22.04.1, 8.0.10-0ubuntu1~24.04.1 09.10.2024 SB2024100927
SB2024100946
SB2024100978
and 12 more
#VU98266 - Use After Free
CVE-2024-38229		 CWE-416 High
No
No
 8.0.10-0ubuntu1~22.04.1, 8.0.10-0ubuntu1~24.04.1 09.10.2024 SB2024100927
SB2024100946
SB20241009101
and 3 more
#VU95920 - Cleartext Transmission of Sensitive Information
CVE-2024-38167		 CWE-319 Medium
No
No
 8.0.8-0ubuntu1~22.04.1, 8.0.8-0ubuntu1~24.04.1 13.08.2024 SB20240813112
SB2024081402
SB2024081804
and 2 more
#VU94043 - Resource exhaustion
CVE-2024-30105		 CWE-400 Medium
No
No
 8.0.7-0ubuntu1~22.04.1, 8.0.7-0ubuntu1~23.10.1, 8.0.7-0ubuntu1~24.04.1 10.07.2024 SB2024071003
SB2024071025
SB2024071055
and 5 more
#VU94042 - Improper input validation
CVE-2024-38095		 CWE-20 Medium
No
No
 8.0.7-0ubuntu1~22.04.1, 8.0.7-0ubuntu1~23.10.1, 8.0.7-0ubuntu1~24.04.1 10.07.2024 SB2024071002
SB2024071025
SB2024071055
and 6 more
#VU94041 - Use After Free
CVE-2024-35264		 CWE-416 High
No
No
 8.0.7-0ubuntu1~22.04.1, 8.0.7-0ubuntu1~23.10.1, 8.0.7-0ubuntu1~24.04.1 10.07.2024 SB2024071002
SB2024071025
SB2024071055
and 3 more
#VU89436 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-30046		 CWE-362 Medium
No
No
 8.0.5-0ubuntu1~22.04.1, 8.0.5-0ubuntu1~23.10.1, 8.0.5-0ubuntu1~24.04.1 14.05.2024 SB2024051437
SB2024051712
SB2024061134
and 3 more
#VU89431 - Heap-based Buffer Overflow
CVE-2024-30045		 CWE-122 High
No
No
 8.0.5-0ubuntu1~22.04.1, 8.0.5-0ubuntu1~23.10.1, 8.0.5-0ubuntu1~24.04.1 14.05.2024 SB2024051434
SB2024051712
SB2024061134
and 4 more
#VU86424 - Improper input validation
CVE-2024-21386		 CWE-20 Medium
No
No
 8.0.2-0ubuntu1~22.04.1, 8.0.2-0ubuntu1~23.10.1 13.02.2024 SB2024021351
SB2024021358
SB2024021359
and 8 more
#VU86423 - Improper input validation
CVE-2024-21404		 CWE-20 Medium
No
No
 8.0.2-0ubuntu1~22.04.1, 8.0.2-0ubuntu1~23.10.1 13.02.2024 SB2024021351
SB2024021358
SB2024021359
and 14 more
#VU85247 - Security Features
CVE-2024-0057		 CWE-254 High
No
No
 8.0.1-0ubuntu1~23.10.1 10.01.2024 SB2024011008
SB2024011058
SB2024011059
and 9 more
#VU85210 - Improper input validation
CVE-2024-21319		 CWE-20 Low
No
No
 8.0.1-0ubuntu1~23.10.1 09.01.2024 SB2024010971
SB2024011058
SB2024011059
and 12 more
#VU83142 - Security Features
CVE-2023-36558		 CWE-254 Low
No
No
 8.0.0-0ubuntu1~23.10.1 15.11.2023 SB2023111504
SB2023111551
SB2023112362
and 9 more


Showing elements 1 - 20 out of 52