Is CVE-2023-36558 in the CISA KEV catalog?

No. CVE-2023-36558 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2023-36558?

CVE-2023-36558 has a CVSS v3 base score of 6.2 (MEDIUM).

What is the EPSS score for CVE-2023-36558?

CVE-2023-36558 has an EPSS score of 1.08% (61th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2023-36558?

Upgrade aspnetcore-runtime-6.0 on rocky 8 to 0:6.0.25-1.el8_9 or later. Fixes are available for 155 affected products.

CVE & CISA-KEV Catalog

CVE-2023-36558

MEDIUM

6.2

CVSS v3

NVD

Description

ASP.NET Core Security Feature Bypass Vulnerability

How to fix

Remediation Available

aspnetcore-runtime-6.0Rocky

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

aspnetcore-runtime-6.0Red Hat / RHEL

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

aspnetcore-runtime-7.0Red Hat / RHEL

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

aspnetcore-runtime-7.0Rocky

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

aspnetcore-runtime-8.0Red Hat / RHEL

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

aspnetcore-runtime-8.0Rocky

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

aspnetcore-targeting-pack-6.0Rocky

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

aspnetcore-targeting-pack-6.0Red Hat / RHEL

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

aspnetcore-targeting-pack-7.0Red Hat / RHEL

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

aspnetcore-targeting-pack-7.0Rocky

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

aspnetcore-targeting-pack-8.0Red Hat / RHEL

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

aspnetcore-targeting-pack-8.0Rocky

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnetRocky

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

dotnetRed Hat / RHEL

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

dotnet-apphost-pack-6.0Rocky

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-apphost-pack-6.0Red Hat / RHEL

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-apphost-pack-6.0-debuginfoRed Hat / RHEL

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-apphost-pack-6.0-debuginfoRocky

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-apphost-pack-7.0Red Hat / RHEL

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-apphost-pack-7.0Rocky

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-apphost-pack-7.0-debuginfoRocky

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-apphost-pack-7.0-debuginfoRed Hat / RHEL

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-apphost-pack-8.0Red Hat / RHEL

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-apphost-pack-8.0Rocky

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-apphost-pack-8.0-debuginfoRed Hat / RHEL

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-apphost-pack-8.0-debuginfoRocky

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-hostRed Hat / RHEL

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-hostRocky

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-host-debuginfoRocky

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-host-debuginfoRed Hat / RHEL

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-hostfxr-6.0Rocky

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-hostfxr-6.0Red Hat / RHEL

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-hostfxr-6.0-debuginfoRocky

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-hostfxr-6.0-debuginfoRed Hat / RHEL

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-hostfxr-7.0Red Hat / RHEL

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-hostfxr-7.0Rocky

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-hostfxr-7.0-debuginfoRed Hat / RHEL

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-hostfxr-7.0-debuginfoRocky

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-hostfxr-8.0Rocky

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-hostfxr-8.0Red Hat / RHEL

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-hostfxr-8.0-debuginfoRocky

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-hostfxr-8.0-debuginfoRed Hat / RHEL

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-runtime-6.0Red Hat / RHEL

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-runtime-6.0Rocky

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-runtime-6.0-debuginfoRed Hat / RHEL

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-runtime-6.0-debuginfoRocky

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-runtime-7.0Rocky

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-runtime-7.0Red Hat / RHEL

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-runtime-7.0-debuginfoRed Hat / RHEL

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-runtime-7.0-debuginfoRocky

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-runtime-8.0Red Hat / RHEL

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-runtime-8.0Rocky

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-runtime-8.0-debuginfoRed Hat / RHEL

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-runtime-8.0-debuginfoRocky

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-sdk-6.0Rocky

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet-sdk-6.0Red Hat / RHEL

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet-sdk-6.0-debuginfoRed Hat / RHEL

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet-sdk-6.0-debuginfoRocky

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet-sdk-6.0-source-built-artifactsRocky

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet-sdk-6.0-source-built-artifactsRed Hat / RHEL

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet-sdk-7.0Rocky

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet-sdk-7.0Red Hat / RHEL

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet-sdk-7.0-debuginfoRocky

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet-sdk-7.0-debuginfoRed Hat / RHEL

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet-sdk-7.0-source-built-artifactsRed Hat / RHEL

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet-sdk-7.0-source-built-artifactsRocky

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet-sdk-8.0Red Hat / RHEL

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

dotnet-sdk-8.0Rocky

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

dotnet-sdk-8.0-debuginfoRed Hat / RHEL

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

dotnet-sdk-8.0-debuginfoRocky

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

dotnet-sdk-8.0-source-built-artifactsRocky

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

dotnet-sdk-8.0-source-built-artifactsRed Hat / RHEL

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

dotnet-targeting-pack-6.0Rocky

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-targeting-pack-6.0Red Hat / RHEL

Fixed in:0:6.0.25-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.25-1.el9_3RHSA-2023:7257

dotnet-targeting-pack-7.0Red Hat / RHEL

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-targeting-pack-7.0Rocky

Fixed in:0:7.0.14-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.14-1.el9_3RHSA-2023:7255

dotnet-targeting-pack-8.0Red Hat / RHEL

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-targeting-pack-8.0Rocky

Fixed in:0:8.0.0-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.0-2.el9_3RHSA-2023:7253

dotnet-templates-6.0Rocky

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet-templates-6.0Red Hat / RHEL

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet-templates-7.0Rocky

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet-templates-7.0Red Hat / RHEL

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet-templates-8.0Rocky

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

dotnet-templates-8.0Red Hat / RHEL

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

dotnet6.0Red Hat / RHEL

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet6.0Rocky

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet6.0-debuginfoRed Hat / RHEL

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet6.0-debuginfoRocky

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet6.0-debugsourceRed Hat / RHEL

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet6.0-debugsourceRocky

Fixed in:0:6.0.125-1.el8_9RHSA-2023:7258

Fixed in:0:6.0.125-1.el9_3RHSA-2023:7257

dotnet7.0Red Hat / RHEL

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet7.0Rocky

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet7.0-debuginfoRocky

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet7.0-debuginfoRed Hat / RHEL

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet7.0-debugsourceRed Hat / RHEL

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet7.0-debugsourceRocky

Fixed in:0:7.0.114-1.el8_9RHSA-2023:7256

Fixed in:0:7.0.114-1.el9_3RHSA-2023:7255

dotnet8.0Rocky

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

dotnet8.0Red Hat / RHEL

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

dotnet8.0-debuginfoRed Hat / RHEL

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

dotnet8.0-debuginfoRocky

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

dotnet8.0-debugsourceRed Hat / RHEL

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

dotnet8.0-debugsourceRocky

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

netstandard-targeting-pack-2.1Red Hat / RHEL

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

netstandard-targeting-pack-2.1Rocky

Fixed in:0:8.0.100-2.el8_9RHSA-2023:7254

Fixed in:0:8.0.100-2.el9_3RHSA-2023:7253

rh-dotnet60-aspnetcore-runtime-6.0Red Hat / RHEL

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-aspnetcore-runtime-6.0Rocky

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-aspnetcore-targeting-pack-6.0Rocky

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-aspnetcore-targeting-pack-6.0Red Hat / RHEL

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnetRed Hat / RHEL

Fixed in:0:6.0.125-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnetRocky

Fixed in:0:6.0.125-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-apphost-pack-6.0Red Hat / RHEL

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-apphost-pack-6.0Rocky

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-debuginfoRocky

Fixed in:0:6.0.125-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-debuginfoRed Hat / RHEL

Fixed in:0:6.0.125-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-hostRocky

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-hostRed Hat / RHEL

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-hostfxr-6.0Red Hat / RHEL

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-hostfxr-6.0Rocky

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-runtime-6.0Red Hat / RHEL

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-runtime-6.0Rocky

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-sdk-6.0Red Hat / RHEL

Fixed in:0:6.0.125-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-sdk-6.0Rocky

Fixed in:0:6.0.125-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-sdk-6.0-source-built-artifactsRed Hat / RHEL

Fixed in:0:6.0.125-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-sdk-6.0-source-built-artifactsRocky

Fixed in:0:6.0.125-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-targeting-pack-6.0Red Hat / RHEL

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-targeting-pack-6.0Rocky

Fixed in:0:6.0.25-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-templates-6.0Red Hat / RHEL

Fixed in:0:6.0.125-1.el7_9RHSA-2023:7259

rh-dotnet60-dotnet-templates-6.0Rocky

Fixed in:0:6.0.125-1.el7_9RHSA-2023:7259

rh-dotnet60-netstandard-targeting-pack-2.1Red Hat / RHEL

Fixed in:0:6.0.125-1.el7_9RHSA-2023:7259

rh-dotnet60-netstandard-targeting-pack-2.1Rocky

Fixed in:0:6.0.125-1.el7_9RHSA-2023:7259

aspnetcore-runtime-6.0Ubuntu

Fixed in:6.0.125-0ubuntu1~22.04.1USN-6480-1

Fixed in:6.0.125-0ubuntu1~23.04.1USN-6480-1

Fixed in:6.0.125-0ubuntu1~23.10.1USN-6480-1

aspnetcore-runtime-7.0Ubuntu

Fixed in:7.0.114-0ubuntu1~22.04.1USN-6480-1

Fixed in:7.0.114-0ubuntu1~23.04.1USN-6480-1

Fixed in:7.0.114-0ubuntu1~23.10.1USN-6480-1

aspnetcore-runtime-8.0Ubuntu

Fixed in:8.0.0-0ubuntu1~23.10.1USN-6480-1

dotnet-hostUbuntu

Fixed in:6.0.125-0ubuntu1~22.04.1USN-6480-1

Fixed in:6.0.125-0ubuntu1~23.04.1USN-6480-1

Fixed in:6.0.125-0ubuntu1~23.10.1USN-6480-1

dotnet-host-7.0Ubuntu

Fixed in:7.0.114-0ubuntu1~22.04.1USN-6480-1

Fixed in:7.0.114-0ubuntu1~23.04.1USN-6480-1

Fixed in:7.0.114-0ubuntu1~23.10.1USN-6480-1

dotnet-host-8.0Ubuntu

Fixed in:8.0.0-0ubuntu1~23.10.1USN-6480-1

dotnet-hostfxr-6.0Ubuntu

Fixed in:6.0.125-0ubuntu1~22.04.1USN-6480-1

Fixed in:6.0.125-0ubuntu1~23.04.1USN-6480-1

Fixed in:6.0.125-0ubuntu1~23.10.1USN-6480-1

dotnet-hostfxr-7.0Ubuntu

Fixed in:7.0.114-0ubuntu1~22.04.1USN-6480-1

Fixed in:7.0.114-0ubuntu1~23.04.1USN-6480-1

Fixed in:7.0.114-0ubuntu1~23.10.1USN-6480-1

dotnet-hostfxr-8.0Ubuntu

Fixed in:8.0.0-0ubuntu1~23.10.1USN-6480-1

dotnet-runtime-6.0Ubuntu

Fixed in:6.0.125-0ubuntu1~22.04.1USN-6480-1

Fixed in:6.0.125-0ubuntu1~23.04.1USN-6480-1

Fixed in:6.0.125-0ubuntu1~23.10.1USN-6480-1

dotnet-runtime-7.0Ubuntu

Fixed in:7.0.114-0ubuntu1~22.04.1USN-6480-1

Fixed in:7.0.114-0ubuntu1~23.04.1USN-6480-1

Fixed in:7.0.114-0ubuntu1~23.10.1USN-6480-1

dotnet-runtime-8.0Ubuntu

Fixed in:8.0.0-0ubuntu1~23.10.1USN-6480-1

dotnet-sdk-6.0Ubuntu

Fixed in:6.0.125-0ubuntu1~22.04.1USN-6480-1

Fixed in:6.0.125-0ubuntu1~23.04.1USN-6480-1

Fixed in:6.0.125-0ubuntu1~23.10.1USN-6480-1

dotnet-sdk-7.0Ubuntu

Fixed in:7.0.114-0ubuntu1~22.04.1USN-6480-1

Fixed in:7.0.114-0ubuntu1~23.04.1USN-6480-1

Fixed in:7.0.114-0ubuntu1~23.10.1USN-6480-1

dotnet-sdk-8.0Ubuntu

Fixed in:8.0.100-0ubuntu1~23.10.1USN-6480-1

dotnet6Ubuntu

Fixed in:6.0.125-0ubuntu1~22.04.1USN-6480-1

Fixed in:6.0.125-0ubuntu1~23.04.1USN-6480-1

Fixed in:6.0.125-0ubuntu1~23.10.1USN-6480-1

dotnet7Ubuntu

Fixed in:7.0.114-0ubuntu1~22.04.1USN-6480-1

Fixed in:7.0.114-0ubuntu1~23.04.1USN-6480-1

Fixed in:7.0.114-0ubuntu1~23.10.1USN-6480-1

dotnet8Ubuntu

Fixed in:8.0.100-8.0.0-0ubuntu1~23.10.1USN-6480-1

Microsoft .NET SDK 6.0Windows application

Affected:6.0.0 6.0.25Fixed in:6.0.25Microsoft Corporation

Affected:7.0.0 7.0.14Fixed in:7.0.14Microsoft Corporation

Microsoft .NET SDK 7.0Windows application

Affected:7.0.0 7.0.14Fixed in:7.0.14Microsoft Corporation

Affected:6.0.0 6.0.25Fixed in:6.0.25Microsoft Corporation

Microsoft .NET SDK 8.0Windows application

Affected:6.0.0 6.0.25Fixed in:6.0.25Microsoft Corporation

Affected:7.0.0 7.0.14Fixed in:7.0.14Microsoft Corporation

Microsoft .NET SDK 9.0Windows application

Affected:7.0.0 7.0.14Fixed in:7.0.14Microsoft Corporation

Affected:6.0.0 6.0.25Fixed in:6.0.25Microsoft Corporation

Microsoft ASP.NET Core Hosting Bundle 6.0Windows application

Affected:6.0.0 6.0.25Fixed in:6.0.25Microsoft Corporation

Affected:7.0.0 7.0.14Fixed in:7.0.14Microsoft Corporation

Microsoft ASP.NET Core Hosting Bundle 7.0Windows application

Affected:6.0.0 6.0.25Fixed in:6.0.25Microsoft Corporation

Affected:7.0.0 7.0.14Fixed in:7.0.14Microsoft Corporation

Microsoft ASP.NET Core Hosting Bundle 8.0Windows application

Affected:6.0.0 6.0.25Fixed in:6.0.25Microsoft Corporation

Affected:7.0.0 7.0.14Fixed in:7.0.14Microsoft Corporation

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploit Intelligence

1.08%probability of exploitation in 30 days

61stpercentile

Moderate risk: more likely to be exploited than 61% of all known CVEs.

References

Patch1

msrc.microsoft.com

Embed a live status badge for CVE-2023-36558

Markdown

[![CVE-2023-36558](https://tridentstack.com/cve/badge/CVE-2023-36558.svg)](https://tridentstack.com/cve/CVE-2023-36558)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-36558"><img src="https://tridentstack.com/cve/badge/CVE-2023-36558.svg" alt="CVE-2023-36558"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-01-01.