Launchpad.net

CVE 2023-21538

.NET Denial of Service Vulnerability

CVE-2023-21538 (Candidate) is related to these bugs:

Bug #1997746: DOTNET_ROOT is not set properly when upgrading

		In	Importance	Status
1997746	DOTNET_ROOT is not set properly when upgrading	dotnet6 (Ubuntu)	Medium	Fix Released
1997746	DOTNET_ROOT is not set properly when upgrading	dotnet6 (Ubuntu Jammy)	Medium	Fix Released
1997746	DOTNET_ROOT is not set properly when upgrading	dotnet6 (Ubuntu Kinetic)	Medium	Fix Released
1997746	DOTNET_ROOT is not set properly when upgrading	dotnet6 (Ubuntu Lunar)	Medium	Fix Released

Bug #1999266: /etc/dotnet/install_location file is missing

		In	Importance	Status
1999266	/etc/dotnet/install_location file is missing	dotnet6 (Ubuntu)	High	Fix Released
1999266	/etc/dotnet/install_location file is missing	dotnet6 (Ubuntu Lunar)	High	Fix Released
1999266	/etc/dotnet/install_location file is missing	dotnet6 (Ubuntu Jammy)	High	Fix Released
1999266	/etc/dotnet/install_location file is missing	dotnet6 (Ubuntu Kinetic)	High	Fix Released

Bug #1999549: [SRU] New upstream microrelease 6.0.112

		In	Importance	Status
1999549	[SRU] New upstream microrelease 6.0.112	dotnet6 (Ubuntu)	High	Fix Released
1999549	[SRU] New upstream microrelease 6.0.112	dotnet6 (Ubuntu Lunar)	High	Fix Released
1999549	[SRU] New upstream microrelease 6.0.112	dotnet6 (Ubuntu Jammy)	High	Fix Released
1999549	[SRU] New upstream microrelease 6.0.112	dotnet6 (Ubuntu Kinetic)	High	Fix Released

Bug #2023531: [MIR] dotnet6

		In	Importance	Status
2023531	[MIR] dotnet6	dotnet6 (Ubuntu)	Undecided	Invalid
2023531	[MIR] dotnet6	dotnet6 (Ubuntu Mantic)	Undecided	Fix Released
2023531	[MIR] dotnet6	dotnet6 (Ubuntu Noble)	Undecided	Invalid
2023531	[MIR] dotnet6	dotnet6 (Ubuntu Jammy)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.