Input validation error in .NET and Visual Studio - CVE-2023-36799

Vulnerability identifier: #VU80730

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-36799

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in .NET Core and Visual Studio. A remote attacker can trick a victim to open a specially crafted file and perform a denial of service (DoS) attack.

.NET
Robotic Process Automation for Cloud Pak
Visual Studio
Amazon Linux AMI
Oracle Linux
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Anolis OS
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for Power, little endian
Ubuntu
Fedora
aspnetcore-runtime-6.0
dotnet-targeting-pack-6.0
dotnet-runtime-6.0
dotnet-hostfxr-6.0
dotnet-host
dotnet-apphost-pack-6.0
aspnetcore-targeting-pack-6.0
dotnet6 (Ubuntu package)
aspnetcore-runtime-6.0 (Ubuntu package)
dotnet-sdk-6.0 (Ubuntu package)
dotnet-host (Ubuntu package)
dotnet-hostfxr-6.0 (Ubuntu package)
dotnet-runtime-6.0 (Ubuntu package)
dotnet6.0
rh-dotnet60-dotnet (Red Hat package)
dotnet6.0 (Red Hat package)
dotnet-templates-6.0
dotnet-sdk-6.0
netstandard-targeting-pack-2.1
dotnet-sdk-6.0-source-built-artifacts
dotnet
aspnetcore-runtime-7.0 (Ubuntu package)
dotnet7 (Ubuntu package)
dotnet-sdk-7.0 (Ubuntu package)
dotnet-runtime-7.0 (Ubuntu package)
dotnet-hostfxr-7.0 (Ubuntu package)
dotnet-host-7.0 (Ubuntu package)
dotnet7.0 (Red Hat package)
dotnet7.0

Install updates from vendor's website.

.NET - addressed in versions 6.0.22, 7.0.11
Visual Studio - addressed in versions 17.2.19 17.2.34031.104, 17.4.11 17.4.34031.109, 17.6.7 17.6.34031.178, 17.7.4 17.7.34031.279
aspnetcore-runtime-6.0 - addressed in versions 6.0.22-1.0.1, 6.0.24-1.0.1
dotnet-targeting-pack-6.0 - addressed in versions 6.0.22-1.0.1, 6.0.24-1.0.1
dotnet-runtime-6.0 - addressed in versions 6.0.22-1.0.1, 6.0.24-1.0.1
dotnet-hostfxr-6.0 - addressed in versions 6.0.22-1.0.1, 6.0.24-1.0.1
dotnet-host - addressed in versions 6.0.22-1.0.1, 6.0.24-1.0.1
dotnet-apphost-pack-6.0 - addressed in versions 6.0.22-1.0.1, 6.0.24-1.0.1
aspnetcore-targeting-pack-6.0 - addressed in versions 6.0.22-1.0.1, 6.0.24-1.0.1
dotnet6 (Ubuntu package) - addressed in versions 6.0.122-0ubuntu1~22.04.1, 6.0.122-0ubuntu1~23.04.1, 6.0.123-0ubuntu1~22.04.1, 6.0.124-0ubuntu1~22.04.1, 6.0.124-0ubuntu1~23.04.1, 6.0.124-0ubuntu1~23.10.1
aspnetcore-runtime-6.0 (Ubuntu package) - addressed in versions 6.0.122-0ubuntu1~22.04.1, 6.0.122-0ubuntu1~23.04.1, 6.0.123-0ubuntu1~22.04.1, 6.0.124-0ubuntu1~22.04.1, 6.0.124-0ubuntu1~23.04.1, 6.0.124-0ubuntu1~23.10.1
dotnet-sdk-6.0 (Ubuntu package) - addressed in versions 6.0.122-0ubuntu1~22.04.1, 6.0.122-0ubuntu1~23.04.1, 6.0.123-0ubuntu1~22.04.1, 6.0.124-0ubuntu1~22.04.1, 6.0.124-0ubuntu1~23.04.1, 6.0.124-0ubuntu1~23.10.1
dotnet-host (Ubuntu package) - addressed in versions 6.0.122-0ubuntu1~22.04.1, 6.0.122-0ubuntu1~23.04.1, 6.0.123-0ubuntu1~22.04.1, 6.0.124-0ubuntu1~22.04.1, 6.0.124-0ubuntu1~23.04.1, 6.0.124-0ubuntu1~23.10.1
dotnet-hostfxr-6.0 (Ubuntu package) - addressed in versions 6.0.122-0ubuntu1~22.04.1, 6.0.122-0ubuntu1~23.04.1, 6.0.123-0ubuntu1~22.04.1, 6.0.124-0ubuntu1~22.04.1, 6.0.124-0ubuntu1~23.04.1, 6.0.124-0ubuntu1~23.10.1
dotnet-runtime-6.0 (Ubuntu package) - addressed in versions 6.0.122-0ubuntu1~22.04.1, 6.0.122-0ubuntu1~23.04.1, 6.0.123-0ubuntu1~22.04.1, 6.0.124-0ubuntu1~22.04.1, 6.0.124-0ubuntu1~23.04.1, 6.0.124-0ubuntu1~23.10.1
dotnet6.0 - update to 6.0.122-1
rh-dotnet60-dotnet (Red Hat package) - addressed in versions 6.0.122-1.el7_9, 6.0.124-1.el7_9
dotnet6.0 (Red Hat package) - addressed in versions 6.0.122-1.el8_8, 6.0.122-1.el9_2, 6.0.124-1.el8_8, 6.0.124-1.el9_2
dotnet6.0 - addressed in versions 6.0.122-1.fc37, 6.0.122-1.fc38, 6.0.122-1.fc39
dotnet-templates-6.0 - addressed in versions 6.0.122-1.0.1, 6.0.124-1.0.1
dotnet-sdk-6.0 - addressed in versions 6.0.122-1.0.1, 6.0.124-1.0.1
netstandard-targeting-pack-2.1 - addressed in versions 6.0.122-1.0.1, 6.0.124-1.0.1
dotnet-sdk-6.0-source-built-artifacts - addressed in versions 6.0.122-1.0.1, 6.0.124-1.0.1
dotnet - addressed in versions 6.0.122-1.0.1, 6.0.124-1.0.1
aspnetcore-runtime-7.0 (Ubuntu package) - addressed in versions 7.0.111-0ubuntu1~22.04.1, 7.0.111-0ubuntu1~23.04.1, 7.0.112-0ubuntu1~22.04.1, 7.0.113-0ubuntu1~22.04.1, 7.0.113-0ubuntu1~23.04.1, 7.0.113-0ubuntu1~23.10.1
dotnet7 (Ubuntu package) - addressed in versions 7.0.111-0ubuntu1~22.04.1, 7.0.111-0ubuntu1~23.04.1, 7.0.112-0ubuntu1~22.04.1, 7.0.113-0ubuntu1~22.04.1, 7.0.113-0ubuntu1~23.04.1, 7.0.113-0ubuntu1~23.10.1
dotnet-sdk-7.0 (Ubuntu package) - addressed in versions 7.0.111-0ubuntu1~22.04.1, 7.0.111-0ubuntu1~23.04.1, 7.0.112-0ubuntu1~22.04.1, 7.0.113-0ubuntu1~22.04.1, 7.0.113-0ubuntu1~23.04.1, 7.0.113-0ubuntu1~23.10.1
dotnet-runtime-7.0 (Ubuntu package) - addressed in versions 7.0.111-0ubuntu1~22.04.1, 7.0.111-0ubuntu1~23.04.1, 7.0.112-0ubuntu1~22.04.1, 7.0.113-0ubuntu1~22.04.1, 7.0.113-0ubuntu1~23.04.1, 7.0.113-0ubuntu1~23.10.1
dotnet-hostfxr-7.0 (Ubuntu package) - addressed in versions 7.0.111-0ubuntu1~22.04.1, 7.0.111-0ubuntu1~23.04.1, 7.0.112-0ubuntu1~22.04.1, 7.0.113-0ubuntu1~22.04.1, 7.0.113-0ubuntu1~23.04.1, 7.0.113-0ubuntu1~23.10.1
dotnet-host-7.0 (Ubuntu package) - addressed in versions 7.0.111-0ubuntu1~22.04.1, 7.0.111-0ubuntu1~23.04.1, 7.0.112-0ubuntu1~22.04.1, 7.0.113-0ubuntu1~22.04.1, 7.0.113-0ubuntu1~23.04.1, 7.0.113-0ubuntu1~23.10.1
dotnet7.0 (Red Hat package) - addressed in versions 7.0.111-1.el8_8, 7.0.111-1.el9_2, 7.0.113-1.el8_8, 7.0.113-1.el9_2
dotnet7.0 - addressed in versions 7.0.111-1.fc37, 7.0.111-1.fc38, 7.0.111-1.fc39
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.10, 23.0.10

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36799

• Denial of service in Microsoft .NET Core and Visual Studio
• Ubuntu update for dotnet6
• Red Hat Enterprise Linux 9 update for .NET 7.0
• Red Hat Enterprise Linux 8 update for .NET 7.0
• Red Hat Enterprise Linux 8 update for .NET 6.0
• Red Hat Enterprise Linux 9 update for .NET 6.0
• Red Hat Enterprise Linux 7 update for .NET 6.0
• Fedora 39 update for dotnet7.0
• Fedora 38 update for dotnet7.0
• Fedora 37 update for dotnet7.0
• Fedora 39 update for dotnet6.0
• Fedora 38 update for dotnet6.0
• Fedora 37 update for dotnet6.0
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Ubuntu update for dotnet6
• Ubuntu update for dotnet6
• Ubuntu update for dotnet6
• Red Hat Enterprise Linux 9 update for .NET 6.0
• Red Hat Enterprise Linux 8 update for .NET 6.0
• Red Hat Enterprise Linux 8 update for .NET 7.0
• Red Hat Enterprise Linux 7 update for .NET 6.0
• Red Hat Enterprise Linux 9 update for .NET 7.0
• Multiple vulnerabilities in Oracle Linux
• Amazon Linux AMI update for dotnet6.0
• Anolis OS update for dotnet6.0
• Anolis OS update for dotnet6.0