Permissions, Privileges, and Access Controls in Microsoft products - CVE-2023-24936

Vulnerability identifier: #VU77237

CSH Severity: High

CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-24936

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions in .NET, .NET Framework, and Visual Studio, which leads to security restrictions bypass and privilege escalation.

Microsoft .NET Framework
.NET
SINEC PNI
Robotic Process Automation for Cloud Pak
Visual Studio
Amazon Linux AMI
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Anolis OS
Ubuntu
dotnet-hostfxr-6.0
dotnet-runtime-6.0
dotnet-targeting-pack-6.0
aspnetcore-runtime-6.0
aspnetcore-targeting-pack-6.0
dotnet-host
dotnet-apphost-pack-6.0
dotnet-hostfxr-6.0 (Ubuntu package)
dotnet-sdk-6.0 (Ubuntu package)
dotnet-host (Ubuntu package)
dotnet6 (Ubuntu package)
aspnetcore-runtime-6.0 (Ubuntu package)
dotnet-runtime-6.0 (Ubuntu package)
dotnet6.0
rh-dotnet60-dotnet (Red Hat package)
dotnet6.0 (Red Hat package)
dotnet-sdk-6.0
dotnet-sdk-6.0-source-built-artifacts
dotnet
dotnet-templates-6.0
netstandard-targeting-pack-2.1
dotnet-hostfxr-7.0 (Ubuntu package)
dotnet-runtime-7.0 (Ubuntu package)
aspnetcore-runtime-7.0 (Ubuntu package)
dotnet7 (Ubuntu package)
dotnet-host-7.0 (Ubuntu package)
dotnet-sdk-7.0 (Ubuntu package)
dotnet7.0 (Red Hat package)

Install updates from vendor's website.

SINEC PNI - update to 2.0
dotnet-hostfxr-6.0 - update to 6.0.20-1.0.1
dotnet-runtime-6.0 - update to 6.0.20-1.0.1
dotnet-targeting-pack-6.0 - update to 6.0.20-1.0.1
aspnetcore-runtime-6.0 - update to 6.0.20-1.0.1
aspnetcore-targeting-pack-6.0 - update to 6.0.20-1.0.1
dotnet-host - update to 6.0.20-1.0.1
dotnet-apphost-pack-6.0 - update to 6.0.20-1.0.1
dotnet-hostfxr-6.0 (Ubuntu package) - addressed in versions 6.0.118-0ubuntu1~22.04.1, 6.0.118-0ubuntu1~22.10.1, 6.0.118-0ubuntu1~23.04.1, 6.0.119-0ubuntu1~22.04.1, 6.0.119-0ubuntu1~22.10.1, 6.0.119-0ubuntu1~23.04.1
dotnet-sdk-6.0 (Ubuntu package) - addressed in versions 6.0.118-0ubuntu1~22.04.1, 6.0.118-0ubuntu1~22.10.1, 6.0.118-0ubuntu1~23.04.1, 6.0.119-0ubuntu1~22.04.1, 6.0.119-0ubuntu1~22.10.1, 6.0.119-0ubuntu1~23.04.1
dotnet-host (Ubuntu package) - addressed in versions 6.0.118-0ubuntu1~22.04.1, 6.0.118-0ubuntu1~22.10.1, 6.0.118-0ubuntu1~23.04.1, 6.0.119-0ubuntu1~22.04.1, 6.0.119-0ubuntu1~22.10.1, 6.0.119-0ubuntu1~23.04.1
dotnet6 (Ubuntu package) - addressed in versions 6.0.118-0ubuntu1~22.04.1, 6.0.118-0ubuntu1~22.10.1, 6.0.118-0ubuntu1~23.04.1, 6.0.119-0ubuntu1~22.04.1, 6.0.119-0ubuntu1~22.10.1, 6.0.119-0ubuntu1~23.04.1
aspnetcore-runtime-6.0 (Ubuntu package) - addressed in versions 6.0.118-0ubuntu1~22.04.1, 6.0.118-0ubuntu1~22.10.1, 6.0.118-0ubuntu1~23.04.1, 6.0.119-0ubuntu1~22.04.1, 6.0.119-0ubuntu1~22.10.1, 6.0.119-0ubuntu1~23.04.1
dotnet-runtime-6.0 (Ubuntu package) - addressed in versions 6.0.118-0ubuntu1~22.04.1, 6.0.118-0ubuntu1~22.10.1, 6.0.118-0ubuntu1~23.04.1, 6.0.119-0ubuntu1~22.04.1, 6.0.119-0ubuntu1~22.10.1, 6.0.119-0ubuntu1~23.04.1
dotnet6.0 - update to 6.0.118-1
rh-dotnet60-dotnet (Red Hat package) - update to 6.0.118-1.el7_9
dotnet6.0 (Red Hat package) - addressed in versions 6.0.118-1.el8_8, 6.0.118-1.el9_2
dotnet-sdk-6.0 - update to 6.0.120-1.0.1
dotnet-sdk-6.0-source-built-artifacts - update to 6.0.120-1.0.1
dotnet - update to 6.0.120-1.0.1
dotnet-templates-6.0 - update to 6.0.120-1.0.1
netstandard-targeting-pack-2.1 - update to 6.0.120-1.0.1
dotnet-hostfxr-7.0 (Ubuntu package) - addressed in versions 7.0.107-0ubuntu1~22.04.1, 7.0.107-0ubuntu1~22.10.1, 7.0.107-0ubuntu1~23.04.1, 7.0.108-0ubuntu1~22.04.1, 7.0.108-0ubuntu1~22.10.1, 7.0.108-0ubuntu1~23.04.1
dotnet-runtime-7.0 (Ubuntu package) - addressed in versions 7.0.107-0ubuntu1~22.04.1, 7.0.107-0ubuntu1~22.10.1, 7.0.107-0ubuntu1~23.04.1, 7.0.108-0ubuntu1~22.04.1, 7.0.108-0ubuntu1~22.10.1, 7.0.108-0ubuntu1~23.04.1
aspnetcore-runtime-7.0 (Ubuntu package) - addressed in versions 7.0.107-0ubuntu1~22.04.1, 7.0.107-0ubuntu1~22.10.1, 7.0.107-0ubuntu1~23.04.1, 7.0.108-0ubuntu1~22.04.1, 7.0.108-0ubuntu1~22.10.1, 7.0.108-0ubuntu1~23.04.1
dotnet7 (Ubuntu package) - addressed in versions 7.0.107-0ubuntu1~22.04.1, 7.0.107-0ubuntu1~22.10.1, 7.0.107-0ubuntu1~23.04.1, 7.0.108-0ubuntu1~22.04.1, 7.0.108-0ubuntu1~22.10.1, 7.0.108-0ubuntu1~23.04.1
dotnet-host-7.0 (Ubuntu package) - addressed in versions 7.0.107-0ubuntu1~22.04.1, 7.0.107-0ubuntu1~22.10.1, 7.0.107-0ubuntu1~23.04.1, 7.0.108-0ubuntu1~22.04.1, 7.0.108-0ubuntu1~22.10.1, 7.0.108-0ubuntu1~23.04.1
dotnet-sdk-7.0 (Ubuntu package) - addressed in versions 7.0.107-0ubuntu1~22.04.1, 7.0.107-0ubuntu1~22.10.1, 7.0.107-0ubuntu1~23.04.1, 7.0.108-0ubuntu1~22.04.1, 7.0.108-0ubuntu1~22.10.1, 7.0.108-0ubuntu1~23.04.1
dotnet7.0 (Red Hat package) - addressed in versions 7.0.107-1.el8_8, 7.0.107-1.el9_2
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.7, 23.0.8

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24936

• Multiple vulnerabilities in Microsoft .NET, .NET Framework and Visual Studio
• Ubuntu update for dotnet6
• Red Hat Enterprise Linux 7 update for .NET 6.0
• Red Hat Enterprise Linux 9 update for .NET 6.0
• Red Hat Enterprise Linux 8 update for .NET 6.0
• Red Hat Enterprise Linux 9 update for .NET 7.0
• Red Hat Enterprise Linux 8 update for .NET 7.0
• Ubuntu update for dotnet6
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in Siemens SINEC PNI
• Amazon Linux AMI update for dotnet6.0
• Anolis OS update for dotnet6.0