RHSA-2023:7259MediumCVSS 9.8

Red Hat Security Advisory: .NET 6.0 security, bug fix, and enhancement update

Published
November 15, 2023
Last Modified
November 3, 2026

🔗 CVE IDs covered (2)

CVE-2023-36049 →CVE-2023-36558 →

📋 Description

CVE-2023-36049 — dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand CVE-2023-36558 — dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms

🎯 Affected products45

  • .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet60-aspnetcore-runtime-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet60-aspnetcore-targeting-pack-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet60-dotnet-0:6.0.125-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet60-dotnet-0:6.0.125-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet60-dotnet-0:6.0.125-1.el7_9.src as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet60-dotnet-0:6.0.125-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet60-dotnet-0:6.0.125-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet60-dotnet-0:6.0.125-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet60-dotnet-apphost-pack-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet60-dotnet-debuginfo-0:6.0.125-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet60-dotnet-debuginfo-0:6.0.125-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet60-dotnet-debuginfo-0:6.0.125-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet60-dotnet-host-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet60-dotnet-host-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet60-dotnet-host-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet60-dotnet-hostfxr-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • rh-dotnet60-dotnet-runtime-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux ComputeNode (v. 7)
  • rh-dotnet60-dotnet-runtime-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Server (v. 7)
  • rh-dotnet60-dotnet-runtime-6.0-0:6.0.25-1.el7_9.x86_64 as a component of .NET Core on Red Hat Enterprise Linux Workstation (v. 7)
  • +15 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)