.NET and Visual Studio Elevation of Privilege Vulnerability
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| .net | Microsoft | 5.0 (including) | 5.0.5 (including) |
| .net_core | Microsoft | 3.1 (including) | 3.1.14 (including) |
| Visual_studio_2019 | Microsoft | 16.0 (including) | 16.4.22 (excluding) |
| Visual_studio_2019 | Microsoft | 16.5.0 (including) | 16.7.15 (excluding) |
| Visual_studio_2019 | Microsoft | 16.8.0 (including) | 16.9.5 (excluding) |
| Visual_studio_2019 | Microsoft | 8.9 (including) | 8.9 (including) |
| .NET Core on Red Hat Enterprise Linux | RedHat | rh-dotnet31-dotnet-0:3.1.115-1.el7_9 | * |
| .NET Core on Red Hat Enterprise Linux | RedHat | rh-dotnet50-dotnet-0:5.0.203-1.el7_9 | * |
| Red Hat Enterprise Linux 8 | RedHat | dotnet5.0-0:5.0.203-1.el8_4 | * |
| Red Hat Enterprise Linux 8 | RedHat | dotnet3.1-0:3.1.115-1.el8_4 | * |
References
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFXJPQUYUITJMV75YN3XIGE3KKN5GOCU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UV4ITB3SUDGR23G7XALUVKFJMZERFUKF/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFXJPQUYUITJMV75YN3XIGE3KKN5GOCU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UV4ITB3SUDGR23G7XALUVKFJMZERFUKF/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204