USN-6438-1
dotnet6, dotnet7 vulnerabilities
Kevin Jones discovered that .NET did not properly process certain X.509 certificates. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-36799)
It was discovered that the .NET Kestrel web server did not properly handle HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2023-44487)
What each source reports
OSV No score
dotnet6, dotnet7 vulnerabilities
Kevin Jones discovered that .NET did not properly process certain X.509 certificates. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-36799)
It was discovered that the .NET Kestrel web server did not properly handle HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2023-44487)
- Record
USN-6438-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dotnet6Ubuntu:23.10 |
before 6.0.123-0ubuntu1, plus listed versions 6.0.116-0ubuntu26.0.116-0ubuntu36.0.118-0ubuntu16.0.119-0ubuntu16.0.120-0ubuntu16.0.120-0ubuntu26.0.121-0ubuntu1 |
6.0.123-0ubuntu1 |
dotnet7Ubuntu:23.10 |
before 7.0.112-0ubuntu1, plus listed versions 7.0.105-0ubuntu27.0.105-0ubuntu37.0.107-0ubuntu17.0.108-0ubuntu27.0.109-0ubuntu17.0.109-0ubuntu27.0.110-0ubuntu1 |
7.0.112-0ubuntu1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-6438-1 is a vulnerability with no CVSS score yet in dotnet6, published October 19, 2023. No source lists public exploit code. Fixed in dotnet6 6.0.123-0ubuntu1.