Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-30399: A remote code execution vulnerability in .NET 8.0 and 9.0. An attacker who can place malicious files in specific locations may trigger unintended code execution when the .NET runtime loads these files.
Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | aspnetcore-runtime-8.0 | 0:8.0.17-1.amzn2023.0.1 |
| Amazon Linux · 2023 | aspnetcore-runtime-dbg-8.0 | 0:8.0.17-1.amzn2023.0.1 |
| Amazon Linux · 2023 | aspnetcore-targeting-pack-8.0 | 0:8.0.17-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet | 0:8.0.117-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-apphost-pack-8.0 | 0:8.0.17-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-apphost-pack-8.0-debuginfo | 0:8.0.17-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-host | 0:8.0.17-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-host-debuginfo | 0:8.0.17-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-hostfxr-8.0 | 0:8.0.17-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-hostfxr-8.0-debuginfo | 0:8.0.17-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-runtime-8.0 | 0:8.0.17-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-runtime-8.0-debuginfo | 0:8.0.17-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-runtime-dbg-8.0 | 0:8.0.17-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-sdk-8.0 | 0:8.0.117-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-sdk-8.0-debuginfo | 0:8.0.117-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-sdk-8.0-source-built-artifacts | 0:8.0.117-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-sdk-dbg-8.0 | 0:8.0.117-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-targeting-pack-8.0 | 0:8.0.17-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet-templates-8.0 | 0:8.0.117-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet8.0-debuginfo | 0:8.0.117-1.amzn2023.0.1 |
| Amazon Linux · 2023 | dotnet8.0-debugsource | 0:8.0.117-1.amzn2023.0.1 |
| Amazon Linux · 2023 | netstandard-targeting-pack-2.1 | 0:8.0.117-1.amzn2023.0.1 |
Vulnerabilities 1
-
High 7.5
.NET and Visual Studio Remote Code Execution Vulnerability
Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-30399.html