Security features bypass in Microsoft products - CVE-2024-0057

Vulnerability identifier: #VU85247

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-0057

CWE-ID: CWE-254

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to security features bypass in NET, .NET Framework and Visual Studio. A remote attacker can present an arbitrary untrusted certificate with malformed signatures and bypass the security feature.

Microsoft .NET Framework
.NET
Visual Studio
Amazon Linux AMI
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for IBM z Systems
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Ubuntu
Tenable Identity Exposure (formerly Tenable.ad)
dotnet-host
dotnet-targeting-pack-6.0
dotnet-hostfxr-6.0
aspnetcore-runtime-6.0
aspnetcore-targeting-pack-6.0
dotnet-runtime-6.0
dotnet-apphost-pack-6.0
dotnet6 (Ubuntu package)
dotnet-sdk-6.0 (Ubuntu package)
dotnet-runtime-6.0 (Ubuntu package)
aspnetcore-runtime-6.0 (Ubuntu package)
dotnet-host (Ubuntu package)
dotnet-hostfxr-6.0 (Ubuntu package)
dotnet6.0
rh-dotnet60-dotnet (Red Hat package)
dotnet6.0 (Red Hat package)
dotnet-sdk-6.0
dotnet-sdk-6.0-source-built-artifacts
dotnet
dotnet-templates-6.0
netstandard-targeting-pack-2.1
dotnet-hostfxr-7.0 (Ubuntu package)
dotnet-host-7.0 (Ubuntu package)
aspnetcore-runtime-7.0 (Ubuntu package)
dotnet-runtime-7.0 (Ubuntu package)
dotnet7 (Ubuntu package)
dotnet-sdk-7.0 (Ubuntu package)
dotnet7.0 (Red Hat package)
dotnet-hostfxr-8.0 (Ubuntu package)
dotnet-host-8.0 (Ubuntu package)
dotnet-runtime-8.0 (Ubuntu package)
aspnetcore-runtime-8.0 (Ubuntu package)
dotnet-sdk-8.0 (Ubuntu package)
dotnet8.0 (Red Hat package)
dotnet8 (Ubuntu package)

Install updates from vendor's website.

Tenable Identity Exposure (formerly Tenable.ad) - update to 3.59.4
dotnet-host - update to 6.0.26-1.0.1
dotnet-targeting-pack-6.0 - update to 6.0.26-1.0.1
dotnet-hostfxr-6.0 - update to 6.0.26-1.0.1
aspnetcore-runtime-6.0 - update to 6.0.26-1.0.1
aspnetcore-targeting-pack-6.0 - update to 6.0.26-1.0.1
dotnet-runtime-6.0 - update to 6.0.26-1.0.1
dotnet-apphost-pack-6.0 - update to 6.0.26-1.0.1
dotnet6 (Ubuntu package) - addressed in versions 6.0.126-0ubuntu1~22.04.1, 6.0.126-0ubuntu1~23.04.1, 6.0.126-0ubuntu1~23.10.1
dotnet-sdk-6.0 (Ubuntu package) - addressed in versions 6.0.126-0ubuntu1~22.04.1, 6.0.126-0ubuntu1~23.04.1, 6.0.126-0ubuntu1~23.10.1
dotnet-runtime-6.0 (Ubuntu package) - addressed in versions 6.0.126-0ubuntu1~22.04.1, 6.0.126-0ubuntu1~23.04.1, 6.0.126-0ubuntu1~23.10.1
aspnetcore-runtime-6.0 (Ubuntu package) - addressed in versions 6.0.126-0ubuntu1~22.04.1, 6.0.126-0ubuntu1~23.04.1, 6.0.126-0ubuntu1~23.10.1
dotnet-host (Ubuntu package) - addressed in versions 6.0.126-0ubuntu1~22.04.1, 6.0.126-0ubuntu1~23.04.1, 6.0.126-0ubuntu1~23.10.1
dotnet-hostfxr-6.0 (Ubuntu package) - addressed in versions 6.0.126-0ubuntu1~22.04.1, 6.0.126-0ubuntu1~23.04.1, 6.0.126-0ubuntu1~23.10.1
dotnet6.0 - update to 6.0.126-1
rh-dotnet60-dotnet (Red Hat package) - update to 6.0.126-1.el7_9
dotnet6.0 (Red Hat package) - addressed in versions 6.0.126-1.el8_9, 6.0.126-1.el9_3
dotnet-sdk-6.0 - update to 6.0.126-1.0.1
dotnet-sdk-6.0-source-built-artifacts - update to 6.0.126-1.0.1
dotnet - update to 6.0.126-1.0.1
dotnet-templates-6.0 - update to 6.0.126-1.0.1
netstandard-targeting-pack-2.1 - update to 6.0.126-1.0.1
dotnet-hostfxr-7.0 (Ubuntu package) - addressed in versions 7.0.115-0ubuntu1~22.04.1, 7.0.115-0ubuntu1~23.04.1, 7.0.115-0ubuntu1~23.10.1
dotnet-host-7.0 (Ubuntu package) - addressed in versions 7.0.115-0ubuntu1~22.04.1, 7.0.115-0ubuntu1~23.04.1, 7.0.115-0ubuntu1~23.10.1
aspnetcore-runtime-7.0 (Ubuntu package) - addressed in versions 7.0.115-0ubuntu1~22.04.1, 7.0.115-0ubuntu1~23.04.1, 7.0.115-0ubuntu1~23.10.1
dotnet-runtime-7.0 (Ubuntu package) - addressed in versions 7.0.115-0ubuntu1~22.04.1, 7.0.115-0ubuntu1~23.04.1, 7.0.115-0ubuntu1~23.10.1
dotnet7 (Ubuntu package) - addressed in versions 7.0.115-0ubuntu1~22.04.1, 7.0.115-0ubuntu1~23.04.1, 7.0.115-0ubuntu1~23.10.1
dotnet-sdk-7.0 (Ubuntu package) - addressed in versions 7.0.115-0ubuntu1~22.04.1, 7.0.115-0ubuntu1~23.04.1, 7.0.115-0ubuntu1~23.10.1
dotnet7.0 (Red Hat package) - addressed in versions 7.0.115-1.el8_9, 7.0.115-1.el9_3
dotnet-hostfxr-8.0 (Ubuntu package) - update to 8.0.1-0ubuntu1~23.10.1
dotnet-host-8.0 (Ubuntu package) - update to 8.0.1-0ubuntu1~23.10.1
dotnet-runtime-8.0 (Ubuntu package) - update to 8.0.1-0ubuntu1~23.10.1
aspnetcore-runtime-8.0 (Ubuntu package) - update to 8.0.1-0ubuntu1~23.10.1
dotnet-sdk-8.0 (Ubuntu package) - update to 8.0.101-0ubuntu1~23.10.1
dotnet8.0 (Red Hat package) - addressed in versions 8.0.101-1.el8_9, 8.0.101-1.el9_3
dotnet8 (Ubuntu package) - update to 8.0.101-8.0.1-0ubuntu1~23.10.1

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057

• Security features bypass in Microsoft NET, .NET Framework, and Visual Studio
• Red Hat Enterprise Linux 8 update for .NET 8.0
• Red Hat Enterprise Linux 9 update for .NET 7.0
• Red Hat Enterprise Linux 9 update for .NET 8.0
• Red Hat Enterprise Linux 9 update for .NET 6.0
• Red Hat Enterprise Linux 8 update for .NET 7.0
• Red Hat Enterprise Linux 8 update for .NET 6.0
• Ubuntu update for dotnet6
• Red Hat Enterprise Linux 7 update for .NET 6.0
• Multiple vulnerabilities in Tenable Identity Exposure
• Amazon Linux AMI update for dotnet6.0
• Anolis OS update for dotnet6.0