Skip to content
OpenAdvisories
High USN-6889-1 3 CVEs

dotnet6, dotnet8 vulnerabilities

Published Jul 10, 2024 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that .NET did not properly handle object
deserialization. An attacker could possibly use this issue to cause
a denial of service. (CVE-2024-30105)

Radek Zikmund discovered that .NET did not properly manage memory. An
attacker could use this issue to cause a denial of service or possibly
execute arbitrary code. (CVE-2024-35264)

It was discovered that .NET did not properly parse X.509 Content and
ObjectIdentifiers. An attacker could possibly use this issue to cause
a denial of service. (CVE-2024-38095)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS dotnet6 6.0.132-0ubuntu1~22.04.1
Ubuntu · 22.04 LTS 22.04:LTS dotnet8 8.0.107-8.0.7-0ubuntu1~22.04.1
Ubuntu · 24.04 LTS 24.04:LTS dotnet8 8.0.107-8.0.7-0ubuntu1~24.04.1

Vulnerabilities 3

References

  • report
    https://ubuntu.com/security/CVE-2024-30105
  • report
    https://ubuntu.com/security/CVE-2024-35264
  • report
    https://ubuntu.com/security/CVE-2024-38095