Summary
USN-6427-1 fixed a vulnerability in .NET. This update
provides the corresponding update for .NET 8.
Original advisory details:
It was discovered that the .NET Kestrel web server did not properly handle
HTTP/2 requests. A remote attacker could possibly use this issue to cause a
denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 23.10 | dotnet8 | 8.0.100-8.0.0~rc2-0ubuntu1 |
References
-
report
https://ubuntu.com/security/CVE-2023-44487