USN-5670-1 — dotnet6 vulnerability

Summary

Edward Thomson discovered that .NET 6 incorrectly handled
permissions for local NuGet cache. A local attacker could
possibly use this issue to execute arbitrary code.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	dotnet6	6.0.110-0ubuntu1~22.04.1

Vulnerabilities 1

High 7.8

CVE-2022-41032 Public exploit

NuGet Client Elevation of Privilege Vulnerability

NuGet Client Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.2 .NET 6.0 Ubuntu Alpine NuGet

Oct 11, 2022

References

report
https://ubuntu.com/security/CVE-2022-41032

dotnet6 vulnerability

Summary

Fixed packages 1

Vulnerabilities 1

NuGet Client Elevation of Privilege Vulnerability

References