Permissions, Privileges, and Access Controls in .NET and Visual Studio - CVE-2023-32032

Vulnerability identifier: #VU77231

CSH Severity: Low

CVSS v4: 5.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-32032

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions in .NET and Visual Studio, which leads to security restrictions bypass and privilege escalation.

.NET
SINEC PNI
Visual Studio
Amazon Linux AMI
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Ubuntu
aspnetcore-runtime-6.0 (Ubuntu package)
dotnet-sdk-6.0 (Ubuntu package)
dotnet-runtime-6.0 (Ubuntu package)
dotnet6 (Ubuntu package)
dotnet-hostfxr-6.0 (Ubuntu package)
dotnet-host (Ubuntu package)
dotnet6.0
dotnet-hostfxr-7.0 (Ubuntu package)
dotnet-runtime-7.0 (Ubuntu package)
dotnet-host-7.0 (Ubuntu package)
dotnet7 (Ubuntu package)
aspnetcore-runtime-7.0 (Ubuntu package)
dotnet-sdk-7.0 (Ubuntu package)
dotnet7.0 (Red Hat package)

Install updates from vendor's website.

SINEC PNI - update to 2.0
aspnetcore-runtime-6.0 (Ubuntu package) - addressed in versions 6.0.118-0ubuntu1~22.04.1, 6.0.118-0ubuntu1~22.10.1, 6.0.118-0ubuntu1~23.04.1, 6.0.119-0ubuntu1~22.04.1, 6.0.119-0ubuntu1~22.10.1, 6.0.119-0ubuntu1~23.04.1
dotnet-sdk-6.0 (Ubuntu package) - addressed in versions 6.0.118-0ubuntu1~22.04.1, 6.0.118-0ubuntu1~22.10.1, 6.0.118-0ubuntu1~23.04.1, 6.0.119-0ubuntu1~22.04.1, 6.0.119-0ubuntu1~22.10.1, 6.0.119-0ubuntu1~23.04.1
dotnet-runtime-6.0 (Ubuntu package) - addressed in versions 6.0.118-0ubuntu1~22.04.1, 6.0.118-0ubuntu1~22.10.1, 6.0.118-0ubuntu1~23.04.1, 6.0.119-0ubuntu1~22.04.1, 6.0.119-0ubuntu1~22.10.1, 6.0.119-0ubuntu1~23.04.1
dotnet6 (Ubuntu package) - addressed in versions 6.0.118-0ubuntu1~22.04.1, 6.0.118-0ubuntu1~22.10.1, 6.0.118-0ubuntu1~23.04.1, 6.0.119-0ubuntu1~22.04.1, 6.0.119-0ubuntu1~22.10.1, 6.0.119-0ubuntu1~23.04.1
dotnet-hostfxr-6.0 (Ubuntu package) - addressed in versions 6.0.118-0ubuntu1~22.04.1, 6.0.118-0ubuntu1~22.10.1, 6.0.118-0ubuntu1~23.04.1, 6.0.119-0ubuntu1~22.04.1, 6.0.119-0ubuntu1~22.10.1, 6.0.119-0ubuntu1~23.04.1
dotnet-host (Ubuntu package) - addressed in versions 6.0.118-0ubuntu1~22.04.1, 6.0.118-0ubuntu1~22.10.1, 6.0.118-0ubuntu1~23.04.1, 6.0.119-0ubuntu1~22.04.1, 6.0.119-0ubuntu1~22.10.1, 6.0.119-0ubuntu1~23.04.1
dotnet6.0 - update to 6.0.118-1
dotnet-hostfxr-7.0 (Ubuntu package) - addressed in versions 7.0.107-0ubuntu1~22.04.1, 7.0.107-0ubuntu1~22.10.1, 7.0.107-0ubuntu1~23.04.1, 7.0.108-0ubuntu1~22.04.1, 7.0.108-0ubuntu1~22.10.1, 7.0.108-0ubuntu1~23.04.1
dotnet-runtime-7.0 (Ubuntu package) - addressed in versions 7.0.107-0ubuntu1~22.04.1, 7.0.107-0ubuntu1~22.10.1, 7.0.107-0ubuntu1~23.04.1, 7.0.108-0ubuntu1~22.04.1, 7.0.108-0ubuntu1~22.10.1, 7.0.108-0ubuntu1~23.04.1
dotnet-host-7.0 (Ubuntu package) - addressed in versions 7.0.107-0ubuntu1~22.04.1, 7.0.107-0ubuntu1~22.10.1, 7.0.107-0ubuntu1~23.04.1, 7.0.108-0ubuntu1~22.04.1, 7.0.108-0ubuntu1~22.10.1, 7.0.108-0ubuntu1~23.04.1
dotnet7 (Ubuntu package) - addressed in versions 7.0.107-0ubuntu1~22.04.1, 7.0.107-0ubuntu1~22.10.1, 7.0.107-0ubuntu1~23.04.1, 7.0.108-0ubuntu1~22.04.1, 7.0.108-0ubuntu1~22.10.1, 7.0.108-0ubuntu1~23.04.1
aspnetcore-runtime-7.0 (Ubuntu package) - addressed in versions 7.0.107-0ubuntu1~22.04.1, 7.0.107-0ubuntu1~22.10.1, 7.0.107-0ubuntu1~23.04.1, 7.0.108-0ubuntu1~22.04.1, 7.0.108-0ubuntu1~22.10.1, 7.0.108-0ubuntu1~23.04.1
dotnet-sdk-7.0 (Ubuntu package) - addressed in versions 7.0.107-0ubuntu1~22.04.1, 7.0.107-0ubuntu1~22.10.1, 7.0.107-0ubuntu1~23.04.1, 7.0.108-0ubuntu1~22.04.1, 7.0.108-0ubuntu1~22.10.1, 7.0.108-0ubuntu1~23.04.1
dotnet7.0 (Red Hat package) - addressed in versions 7.0.107-1.el8_8, 7.0.107-1.el9_2

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32032

• Multiple vulnerabilities in Microsoft .NET and Visual Studio
• Ubuntu update for dotnet6
• Red Hat Enterprise Linux 9 update for .NET 7.0
• Red Hat Enterprise Linux 8 update for .NET 7.0
• Ubuntu update for dotnet6
• Multiple vulnerabilities in Siemens SINEC PNI
• Amazon Linux AMI update for dotnet6.0