CVE-2023-35390
Fixed in a distro release EPSS 2%CVSS 7.8
.NET and Visual Studio Remote Code Execution Vulnerability
Products: Microsoft .NET 6.0, Microsoft .NET 7.0, Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| NuGet | Microsoft.NET.Build.Containers | 7.0.307 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | aspnetcore-runtime-6.0 | 6.0.21-1.el8_8 |
| AlmaLinux 8 | aspnetcore-runtime-7.0 | 7.0.10-1.el8_8 |
| AlmaLinux 8 | aspnetcore-targeting-pack-6.0 | 6.0.21-1.el8_8 |
| AlmaLinux 8 | aspnetcore-targeting-pack-7.0 | 7.0.10-1.el8_8 |
| AlmaLinux 8 | dotnet | 7.0.110-1.el8_8 |
| AlmaLinux 8 | dotnet-apphost-pack-6.0 | 6.0.21-1.el8_8 |
| AlmaLinux 8 | dotnet-apphost-pack-7.0 | 7.0.10-1.el8_8 |
| AlmaLinux 8 | dotnet-host | 7.0.10-1.el8_8 |
| AlmaLinux 8 | dotnet-hostfxr-6.0 | 6.0.21-1.el8_8 |
| AlmaLinux 8 | dotnet-hostfxr-7.0 | 7.0.10-1.el8_8 |
| AlmaLinux 8 | dotnet-runtime-6.0 | 6.0.21-1.el8_8 |
| AlmaLinux 8 | dotnet-runtime-7.0 | 7.0.10-1.el8_8 |
| AlmaLinux 8 | dotnet-sdk-6.0 | 6.0.121-1.el8_8 |
| AlmaLinux 8 | dotnet-sdk-6.0-source-built-artifacts | 6.0.121-1.el8_8 |
| AlmaLinux 8 | dotnet-sdk-7.0 | 7.0.110-1.el8_8 |
| AlmaLinux 8 | dotnet-sdk-7.0-source-built-artifacts | 7.0.110-1.el8_8 |
| AlmaLinux 8 | dotnet-targeting-pack-6.0 | 6.0.21-1.el8_8 |
| AlmaLinux 8 | dotnet-targeting-pack-7.0 | 7.0.10-1.el8_8 |
| AlmaLinux 8 | dotnet-templates-6.0 | 6.0.121-1.el8_8 |
| AlmaLinux 8 | dotnet-templates-7.0 | 7.0.110-1.el8_8 |
| AlmaLinux 8 | netstandard-targeting-pack-2.1 | 7.0.110-1.el8_8 |
| AlmaLinux 9 | aspnetcore-runtime-6.0 | 6.0.21-1.el9_2 |
| AlmaLinux 9 | aspnetcore-runtime-7.0 | 7.0.10-1.el9_2 |
| AlmaLinux 9 | aspnetcore-targeting-pack-6.0 | 6.0.21-1.el9_2 |
| AlmaLinux 9 | aspnetcore-targeting-pack-7.0 | 7.0.10-1.el9_2 |
| AlmaLinux 9 | dotnet-apphost-pack-6.0 | 6.0.21-1.el9_2 |
| AlmaLinux 9 | dotnet-apphost-pack-7.0 | 7.0.10-1.el9_2 |
| AlmaLinux 9 | dotnet-host | 7.0.10-1.el9_2 |
| AlmaLinux 9 | dotnet-hostfxr-6.0 | 6.0.21-1.el9_2 |
| AlmaLinux 9 | dotnet-hostfxr-7.0 | 7.0.10-1.el9_2 |
| AlmaLinux 9 | dotnet-runtime-6.0 | 6.0.21-1.el9_2 |
| AlmaLinux 9 | dotnet-runtime-7.0 | 7.0.10-1.el9_2 |
| AlmaLinux 9 | dotnet-sdk-6.0 | 6.0.121-1.el9_2 |
| AlmaLinux 9 | dotnet-sdk-6.0-source-built-artifacts | 6.0.121-1.el9_2 |
| AlmaLinux 9 | dotnet-sdk-7.0 | 7.0.110-1.el9_2 |
| AlmaLinux 9 | dotnet-sdk-7.0-source-built-artifacts | 7.0.110-1.el9_2 |
| AlmaLinux 9 | dotnet-targeting-pack-6.0 | 6.0.21-1.el9_2 |
| AlmaLinux 9 | dotnet-targeting-pack-7.0 | 7.0.10-1.el9_2 |
| AlmaLinux 9 | dotnet-templates-6.0 | 6.0.121-1.el9_2 |
| AlmaLinux 9 | dotnet-templates-7.0 | 7.0.110-1.el9_2 |
| AlmaLinux 9 | netstandard-targeting-pack-2.1 | 7.0.110-1.el9_2 |
| Red Hat Enterprise Linux 8 | aspnetcore-runtime-6.0 | 0:6.0.21-1.el8_8 |
| Red Hat Enterprise Linux 8 | aspnetcore-runtime-7.0 | 0:7.0.10-1.el8_8 |
| Red Hat Enterprise Linux 8 | aspnetcore-targeting-pack-6.0 | 0:6.0.21-1.el8_8 |
| Red Hat Enterprise Linux 8 | aspnetcore-targeting-pack-7.0 | 0:7.0.10-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet | 0:7.0.110-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-6.0 | 0:6.0.21-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-6.0-debuginfo | 0:6.0.21-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-7.0 | 0:7.0.10-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-apphost-pack-7.0-debuginfo | 0:7.0.10-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-host | 0:7.0.10-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-host-debuginfo | 0:7.0.10-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-6.0 | 0:6.0.21-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-6.0-debuginfo | 0:6.0.21-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-7.0 | 0:7.0.10-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-hostfxr-7.0-debuginfo | 0:7.0.10-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-6.0 | 0:6.0.21-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-6.0-debuginfo | 0:6.0.21-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-7.0 | 0:7.0.10-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-runtime-7.0-debuginfo | 0:7.0.10-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-6.0 | 0:6.0.121-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-6.0-debuginfo | 0:6.0.121-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-6.0-source-built-artifacts | 0:6.0.121-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-7.0 | 0:7.0.110-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-7.0-debuginfo | 0:7.0.110-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-sdk-7.0-source-built-artifacts | 0:7.0.110-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-targeting-pack-6.0 | 0:6.0.21-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-targeting-pack-7.0 | 0:7.0.10-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-templates-6.0 | 0:6.0.121-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet-templates-7.0 | 0:7.0.110-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet6.0 | 0:6.0.121-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet6.0-debuginfo | 0:6.0.121-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet6.0-debugsource | 0:6.0.121-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet7.0 | 0:7.0.110-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet7.0-debuginfo | 0:7.0.110-1.el8_8 |
| Red Hat Enterprise Linux 8 | dotnet7.0-debugsource | 0:7.0.110-1.el8_8 |
| Red Hat Enterprise Linux 8 | netstandard-targeting-pack-2.1 | 0:7.0.110-1.el8_8 |
| Red Hat Enterprise Linux 9 | aspnetcore-runtime-6.0 | 0:6.0.21-1.el9_2 |
| Red Hat Enterprise Linux 9 | aspnetcore-runtime-7.0 | 0:7.0.10-1.el9_2 |
| Red Hat Enterprise Linux 9 | aspnetcore-targeting-pack-6.0 | 0:6.0.21-1.el9_2 |
| Red Hat Enterprise Linux 9 | aspnetcore-targeting-pack-7.0 | 0:7.0.10-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-apphost-pack-6.0 | 0:6.0.21-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-apphost-pack-6.0-debuginfo | 0:6.0.21-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-apphost-pack-7.0 | 0:7.0.10-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-apphost-pack-7.0-debuginfo | 0:7.0.10-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-host | 0:7.0.10-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-host-debuginfo | 0:7.0.10-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-hostfxr-6.0 | 0:6.0.21-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-hostfxr-6.0-debuginfo | 0:6.0.21-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-hostfxr-7.0 | 0:7.0.10-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-hostfxr-7.0-debuginfo | 0:7.0.10-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-runtime-6.0 | 0:6.0.21-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-runtime-6.0-debuginfo | 0:6.0.21-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-runtime-7.0 | 0:7.0.10-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-runtime-7.0-debuginfo | 0:7.0.10-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-sdk-6.0 | 0:6.0.121-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-sdk-6.0-debuginfo | 0:6.0.121-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-sdk-6.0-source-built-artifacts | 0:6.0.121-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-sdk-7.0 | 0:7.0.110-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-sdk-7.0-debuginfo | 0:7.0.110-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-sdk-7.0-source-built-artifacts | 0:7.0.110-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-targeting-pack-6.0 | 0:6.0.21-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-targeting-pack-7.0 | 0:7.0.10-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-templates-6.0 | 0:6.0.121-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet-templates-7.0 | 0:7.0.110-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet6.0 | 0:6.0.121-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet6.0-debuginfo | 0:6.0.121-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet6.0-debugsource | 0:6.0.121-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet7.0 | 0:7.0.110-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet7.0-debuginfo | 0:7.0.110-1.el9_2 |
| Red Hat Enterprise Linux 9 | dotnet7.0-debugsource | 0:7.0.110-1.el9_2 |
| Red Hat Enterprise Linux 9 | netstandard-targeting-pack-2.1 | 0:7.0.110-1.el9_2 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-aspnetcore-runtime-6.0 | 0:6.0.21-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-aspnetcore-targeting-pack-6.0 | 0:6.0.21-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet | 0:6.0.121-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-apphost-pack-6.0 | 0:6.0.21-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-debuginfo | 0:6.0.121-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-host | 0:6.0.21-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-hostfxr-6.0 | 0:6.0.21-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-runtime-6.0 | 0:6.0.21-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-sdk-6.0 | 0:6.0.121-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-sdk-6.0-source-built-artifacts | 0:6.0.121-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-targeting-pack-6.0 | 0:6.0.21-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-dotnet-templates-6.0 | 0:6.0.121-1.el7_9 |
| Red Hat rhel dotnet 6.0 | rh-dotnet60-netstandard-targeting-pack-2.1 | 0:6.0.121-1.el7_9 |
| Red Hat rhel eus 8.6 | aspnetcore-runtime-6.0 | 0:6.0.21-1.el8_6 |
| Red Hat rhel eus 8.6 | aspnetcore-targeting-pack-6.0 | 0:6.0.21-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet | 0:6.0.121-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet-apphost-pack-6.0 | 0:6.0.21-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet-apphost-pack-6.0-debuginfo | 0:6.0.21-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet-host | 0:6.0.21-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet-host-debuginfo | 0:6.0.21-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet-hostfxr-6.0 | 0:6.0.21-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet-hostfxr-6.0-debuginfo | 0:6.0.21-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet-runtime-6.0 | 0:6.0.21-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet-runtime-6.0-debuginfo | 0:6.0.21-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet-sdk-6.0 | 0:6.0.121-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet-sdk-6.0-debuginfo | 0:6.0.121-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet-sdk-6.0-source-built-artifacts | 0:6.0.121-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet-targeting-pack-6.0 | 0:6.0.21-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet-templates-6.0 | 0:6.0.121-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet6.0 | 0:6.0.121-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet6.0-debuginfo | 0:6.0.121-1.el8_6 |
| Red Hat rhel eus 8.6 | dotnet6.0-debugsource | 0:6.0.121-1.el8_6 |
| Red Hat rhel eus 8.6 | netstandard-targeting-pack-2.1 | 0:6.0.121-1.el8_6 |
| Red Hat rhel eus 9.0 | aspnetcore-runtime-6.0 | 0:6.0.21-1.el9_0 |
| Red Hat rhel eus 9.0 | aspnetcore-targeting-pack-6.0 | 0:6.0.21-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet-apphost-pack-6.0 | 0:6.0.21-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet-apphost-pack-6.0-debuginfo | 0:6.0.21-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet-host | 0:6.0.21-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet-host-debuginfo | 0:6.0.21-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet-hostfxr-6.0 | 0:6.0.21-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet-hostfxr-6.0-debuginfo | 0:6.0.21-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet-runtime-6.0 | 0:6.0.21-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet-runtime-6.0-debuginfo | 0:6.0.21-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet-sdk-6.0 | 0:6.0.121-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet-sdk-6.0-debuginfo | 0:6.0.121-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet-sdk-6.0-source-built-artifacts | 0:6.0.121-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet-targeting-pack-6.0 | 0:6.0.21-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet-templates-6.0 | 0:6.0.121-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet6.0 | 0:6.0.121-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet6.0-debuginfo | 0:6.0.121-1.el9_0 |
| Red Hat rhel eus 9.0 | dotnet6.0-debugsource | 0:6.0.121-1.el9_0 |
| Red Hat rhel eus 9.0 | netstandard-targeting-pack-2.1 | 0:6.0.121-1.el9_0 |
| Rocky Linux 8 | dotnet6.0 | 0:6.0.121-1.el8_8 |
| Rocky Linux 8 | dotnet7.0 | 0:7.0.110-1.el8_8 |
| Ubuntu 22.04 LTS | dotnet6 | 6.0.121-0ubuntu1~22.04.1 |
| Ubuntu 22.04 LTS | dotnet7 | 7.0.110-0ubuntu1~22.04.1 |