Amazon Linux AMI update for dotnet6.0

1) Input validation error

EUVDB-ID: #VU80675

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-36792

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to insufficient validation of user-supplied input in Visual Studio. A remote attacker can trick a victim to open a specially crafted package file and execute arbitrary code on the target system.

Mitigation

Update the affected packages:

aarch64:
    dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-runtime-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    aspnetcore-runtime-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-hostfxr-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet6.0-debuginfo-6.0.122-1.amzn2023.0.1.aarch64
    netstandard-targeting-pack-2.1-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-hostfxr-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-templates-6.0-6.0.122-1.amzn2023.0.1.aarch64
    aspnetcore-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-sdk-6.0-debuginfo-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-apphost-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-apphost-pack-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-runtime-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-host-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-host-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet6.0-debugsource-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-sdk-6.0-6.0.122-1.amzn2023.0.1.aarch64

src:
    dotnet6.0-6.0.122-1.amzn2023.0.1.src

x86_64:
    dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-apphost-pack-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-runtime-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-templates-6.0-6.0.122-1.amzn2023.0.1.x86_64
    dotnet6.0-debuginfo-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-host-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-hostfxr-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-host-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    aspnetcore-runtime-6.0-6.0.22-1.amzn2023.0.1.x86_64
    netstandard-targeting-pack-2.1-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-hostfxr-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-sdk-6.0-debuginfo-6.0.122-1.amzn2023.0.1.x86_64
    aspnetcore-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-apphost-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-runtime-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet6.0-debugsource-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-sdk-6.0-6.0.122-1.amzn2023.0.1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

dotnet6.0: before 6.0.122-1

CPE2.3

External links

https://alas.aws.amazon.com/AL2023/ALAS-2023-369.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Input validation error

EUVDB-ID: #VU80674

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-36793

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to insufficient validation of user-supplied input in Visual Studio. A remote attacker can trick a victim to open a specially crafted package file and execute arbitrary code on the target system.

Mitigation

Update the affected packages:

aarch64:
    dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-runtime-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    aspnetcore-runtime-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-hostfxr-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet6.0-debuginfo-6.0.122-1.amzn2023.0.1.aarch64
    netstandard-targeting-pack-2.1-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-hostfxr-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-templates-6.0-6.0.122-1.amzn2023.0.1.aarch64
    aspnetcore-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-sdk-6.0-debuginfo-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-apphost-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-apphost-pack-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-runtime-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-host-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-host-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet6.0-debugsource-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-sdk-6.0-6.0.122-1.amzn2023.0.1.aarch64

src:
    dotnet6.0-6.0.122-1.amzn2023.0.1.src

x86_64:
    dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-apphost-pack-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-runtime-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-templates-6.0-6.0.122-1.amzn2023.0.1.x86_64
    dotnet6.0-debuginfo-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-host-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-hostfxr-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-host-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    aspnetcore-runtime-6.0-6.0.22-1.amzn2023.0.1.x86_64
    netstandard-targeting-pack-2.1-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-hostfxr-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-sdk-6.0-debuginfo-6.0.122-1.amzn2023.0.1.x86_64
    aspnetcore-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-apphost-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-runtime-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet6.0-debugsource-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-sdk-6.0-6.0.122-1.amzn2023.0.1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

dotnet6.0: before 6.0.122-1

CPE2.3

External links

https://alas.aws.amazon.com/AL2023/ALAS-2023-369.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Input validation error

EUVDB-ID: #VU80671

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-36794

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to insufficient validation of user-supplied input in Visual Studio. A remote attacker can trick a victim to open a specially crafted package file and execute arbitrary code on the target system.

Mitigation

Update the affected packages:

aarch64:
    dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-runtime-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    aspnetcore-runtime-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-hostfxr-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet6.0-debuginfo-6.0.122-1.amzn2023.0.1.aarch64
    netstandard-targeting-pack-2.1-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-hostfxr-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-templates-6.0-6.0.122-1.amzn2023.0.1.aarch64
    aspnetcore-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-sdk-6.0-debuginfo-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-apphost-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-apphost-pack-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-runtime-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-host-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-host-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet6.0-debugsource-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-sdk-6.0-6.0.122-1.amzn2023.0.1.aarch64

src:
    dotnet6.0-6.0.122-1.amzn2023.0.1.src

x86_64:
    dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-apphost-pack-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-runtime-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-templates-6.0-6.0.122-1.amzn2023.0.1.x86_64
    dotnet6.0-debuginfo-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-host-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-hostfxr-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-host-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    aspnetcore-runtime-6.0-6.0.22-1.amzn2023.0.1.x86_64
    netstandard-targeting-pack-2.1-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-hostfxr-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-sdk-6.0-debuginfo-6.0.122-1.amzn2023.0.1.x86_64
    aspnetcore-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-apphost-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-runtime-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet6.0-debugsource-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-sdk-6.0-6.0.122-1.amzn2023.0.1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

dotnet6.0: before 6.0.122-1

CPE2.3

External links

https://alas.aws.amazon.com/AL2023/ALAS-2023-369.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Input validation error

EUVDB-ID: #VU80669

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-36796

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to insufficient validation of user-supplied input in Visual Studio. A remote attacker can trick a victim to open a specially crafted package file and execute arbitrary code on the target system.

Mitigation

Update the affected packages:

aarch64:
    dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-runtime-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    aspnetcore-runtime-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-hostfxr-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet6.0-debuginfo-6.0.122-1.amzn2023.0.1.aarch64
    netstandard-targeting-pack-2.1-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-hostfxr-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-templates-6.0-6.0.122-1.amzn2023.0.1.aarch64
    aspnetcore-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-sdk-6.0-debuginfo-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-apphost-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-apphost-pack-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-runtime-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-host-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-host-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet6.0-debugsource-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-sdk-6.0-6.0.122-1.amzn2023.0.1.aarch64

src:
    dotnet6.0-6.0.122-1.amzn2023.0.1.src

x86_64:
    dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-apphost-pack-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-runtime-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-templates-6.0-6.0.122-1.amzn2023.0.1.x86_64
    dotnet6.0-debuginfo-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-host-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-hostfxr-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-host-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    aspnetcore-runtime-6.0-6.0.22-1.amzn2023.0.1.x86_64
    netstandard-targeting-pack-2.1-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-hostfxr-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-sdk-6.0-debuginfo-6.0.122-1.amzn2023.0.1.x86_64
    aspnetcore-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-apphost-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-runtime-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet6.0-debugsource-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-sdk-6.0-6.0.122-1.amzn2023.0.1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

dotnet6.0: before 6.0.122-1

CPE2.3

External links

https://alas.aws.amazon.com/AL2023/ALAS-2023-369.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Input validation error

EUVDB-ID: #VU80730

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-36799

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in .NET Core and Visual Studio. A remote attacker can trick a victim to open a specially crafted file and perform a denial of service (DoS) attack.

Mitigation

Update the affected packages:

aarch64:
    dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-runtime-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    aspnetcore-runtime-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-hostfxr-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet6.0-debuginfo-6.0.122-1.amzn2023.0.1.aarch64
    netstandard-targeting-pack-2.1-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-hostfxr-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-templates-6.0-6.0.122-1.amzn2023.0.1.aarch64
    aspnetcore-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-sdk-6.0-debuginfo-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-apphost-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-apphost-pack-6.0-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-runtime-6.0-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-host-6.0.22-1.amzn2023.0.1.aarch64
    dotnet-host-debuginfo-6.0.22-1.amzn2023.0.1.aarch64
    dotnet6.0-debugsource-6.0.122-1.amzn2023.0.1.aarch64
    dotnet-sdk-6.0-6.0.122-1.amzn2023.0.1.aarch64

src:
    dotnet6.0-6.0.122-1.amzn2023.0.1.src

x86_64:
    dotnet-sdk-6.0-source-built-artifacts-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-apphost-pack-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-runtime-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-templates-6.0-6.0.122-1.amzn2023.0.1.x86_64
    dotnet6.0-debuginfo-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-host-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-hostfxr-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-host-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    aspnetcore-runtime-6.0-6.0.22-1.amzn2023.0.1.x86_64
    netstandard-targeting-pack-2.1-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-hostfxr-6.0-debuginfo-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-sdk-6.0-debuginfo-6.0.122-1.amzn2023.0.1.x86_64
    aspnetcore-targeting-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-apphost-pack-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet-runtime-6.0-6.0.22-1.amzn2023.0.1.x86_64
    dotnet6.0-debugsource-6.0.122-1.amzn2023.0.1.x86_64
    dotnet-sdk-6.0-6.0.122-1.amzn2023.0.1.x86_64

Vulnerable software versions

Amazon Linux AMI: All versions

dotnet6.0: before 6.0.122-1

CPE2.3

External links

https://alas.aws.amazon.com/AL2023/ALAS-2023-369.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

Risk	High
Patch available	YES
Number of vulnerabilities	5
CVE-ID	CVE-2023-36792 CVE-2023-36793 CVE-2023-36794 CVE-2023-36796 CVE-2023-36799
CWE-ID	CWE-20
Exploitation vector	Network
Public exploit	N/A
Vulnerable software	Amazon Linux AMI Operating systems & Components / Operating system dotnet6.0 Operating systems & Components / Operating system package or component
Vendor	Amazon Web Services