Skip to content
OpenAdvisories
High ALAS2023-2024-545 3 CVEs

Important: dotnet6.0 security update (Amazon Linux 2023)

Published Feb 29, 2024 · Updated Mar 5, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-21404: .NET Denial of Service Vulnerability CVE-2024-21386: .NET Denial of Service Vulnerability CVE-2024-20672: .NET Denial of Service Vulnerability

Fixed packages 19

ReleasePackageFixed in
Amazon Linux · 2023 aspnetcore-runtime-6.0 0:6.0.27-1.amzn2023.0.1
Amazon Linux · 2023 aspnetcore-targeting-pack-6.0 0:6.0.27-1.amzn2023.0.1
Amazon Linux · 2023 dotnet 0:6.0.127-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-apphost-pack-6.0 0:6.0.27-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-apphost-pack-6.0-debuginfo 0:6.0.27-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-host 0:6.0.27-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-host-debuginfo 0:6.0.27-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-hostfxr-6.0 0:6.0.27-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-hostfxr-6.0-debuginfo 0:6.0.27-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-runtime-6.0 0:6.0.27-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-runtime-6.0-debuginfo 0:6.0.27-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-sdk-6.0 0:6.0.127-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-sdk-6.0-debuginfo 0:6.0.127-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-sdk-6.0-source-built-artifacts 0:6.0.127-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-targeting-pack-6.0 0:6.0.27-1.amzn2023.0.1
Amazon Linux · 2023 dotnet-templates-6.0 0:6.0.127-1.amzn2023.0.1
Amazon Linux · 2023 dotnet6.0-debuginfo 0:6.0.127-1.amzn2023.0.1
Amazon Linux · 2023 dotnet6.0-debugsource 0:6.0.127-1.amzn2023.0.1
Amazon Linux · 2023 netstandard-targeting-pack-2.1 0:6.0.127-1.amzn2023.0.1

Vulnerabilities 3

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-20672.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-21386.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-21404.html