USN-7210-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-7210-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7210-1.json

JSON Data

https://api.test.osv.dev/v1/vulns/USN-7210-1

Related

CVE-2025-21171
CVE-2025-21172
CVE-2025-21173
CVE-2025-21176
UBUNTU-CVE-2025-21171
UBUNTU-CVE-2025-21172
UBUNTU-CVE-2025-21173
UBUNTU-CVE-2025-21176

Published

2025-01-16T12:30:24.916143Z

Modified

2025-01-16T12:30:24.916143Z

Summary

dotnet8, dotnet9 vulnerabilities

Details

It was discovered that .NET did not properly handle input provided to its Convert.TryToHexString method. An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-21171)

It was discovered that .NET did not properly handle an integer overflow when processing certain specially crafted files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-21172)

Daniel Plaisted and Noah Gilson discovered that .NET insecurely handled temporary file usage which could result in malicious package dependency injection. An attacker could possibly use this issue to elevate privileges. (CVE-2025-21173)

It was discovered that .NET did not properly perform input data validation when processing certain specially crafted files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-21176)

References

Affected packages

Ubuntu:22.04:LTS / dotnet8

Package

Name: dotnet8
Purl: pkg:deb/ubuntu/dotnet8@8.0.112-8.0.12-0ubuntu1~22.04.1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.0.112-8.0.12-0ubuntu1~22.04.1

Affected versions

8.*

8.0.102-8.0.2-0ubuntu1~22.04.1

8.0.103-8.0.3-0ubuntu1~22.04.1

8.0.103-8.0.3-0ubuntu1~22.04.2

8.0.105-8.0.5-0ubuntu1~22.04.1

8.0.107-8.0.7-0ubuntu1~22.04.1

8.0.108-8.0.8-0ubuntu1~22.04.1

8.0.110-8.0.10-0ubuntu1~22.04.1

8.0.111-8.0.11-0ubuntu1~22.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "8.0.12-0ubuntu1~22.04.1",
            "binary_name": "aspnetcore-runtime-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~22.04.1",
            "binary_name": "aspnetcore-runtime-dbg-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~22.04.1",
            "binary_name": "aspnetcore-targeting-pack-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~22.04.1",
            "binary_name": "dotnet-apphost-pack-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~22.04.1",
            "binary_name": "dotnet-apphost-pack-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~22.04.1",
            "binary_name": "dotnet-host-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~22.04.1",
            "binary_name": "dotnet-host-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~22.04.1",
            "binary_name": "dotnet-hostfxr-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~22.04.1",
            "binary_name": "dotnet-hostfxr-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~22.04.1",
            "binary_name": "dotnet-runtime-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~22.04.1",
            "binary_name": "dotnet-runtime-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~22.04.1",
            "binary_name": "dotnet-runtime-dbg-8.0"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~22.04.1",
            "binary_name": "dotnet-sdk-8.0"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~22.04.1",
            "binary_name": "dotnet-sdk-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~22.04.1",
            "binary_name": "dotnet-sdk-8.0-source-built-artifacts"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~22.04.1",
            "binary_name": "dotnet-sdk-dbg-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~22.04.1",
            "binary_name": "dotnet-targeting-pack-8.0"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~22.04.1",
            "binary_name": "dotnet-templates-8.0"
        },
        {
            "binary_version": "8.0.112-8.0.12-0ubuntu1~22.04.1",
            "binary_name": "dotnet8"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~22.04.1",
            "binary_name": "netstandard-targeting-pack-2.1-8.0"
        }
    ]
}

Ubuntu:24.10 / dotnet8

Package

Name: dotnet8
Purl: pkg:deb/ubuntu/dotnet8@8.0.112-8.0.12-0ubuntu1~24.10.1?arch=source&distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.0.112-8.0.12-0ubuntu1~24.10.1

Affected versions

8.*

8.0.104-8.0.4-0ubuntu1

8.0.105-8.0.5-0ubuntu1

8.0.105-8.0.5-0ubuntu2

8.0.107-8.0.7-0ubuntu1

8.0.108-8.0.8-0ubuntu1

8.0.108-8.0.8-0ubuntu2

8.0.108-8.0.8-0ubuntu3

8.0.110-8.0.10-0ubuntu1

8.0.111-8.0.11-0ubuntu1~24.10.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "8.0.12-0ubuntu1~24.10.1",
            "binary_name": "aspnetcore-runtime-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.10.1",
            "binary_name": "aspnetcore-runtime-dbg-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.10.1",
            "binary_name": "aspnetcore-targeting-pack-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.10.1",
            "binary_name": "dotnet-apphost-pack-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.10.1",
            "binary_name": "dotnet-apphost-pack-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.10.1",
            "binary_name": "dotnet-host-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.10.1",
            "binary_name": "dotnet-host-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.10.1",
            "binary_name": "dotnet-hostfxr-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.10.1",
            "binary_name": "dotnet-hostfxr-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.10.1",
            "binary_name": "dotnet-runtime-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.10.1",
            "binary_name": "dotnet-runtime-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.10.1",
            "binary_name": "dotnet-runtime-dbg-8.0"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~24.10.1",
            "binary_name": "dotnet-sdk-8.0"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~24.10.1",
            "binary_name": "dotnet-sdk-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~24.10.1",
            "binary_name": "dotnet-sdk-8.0-source-built-artifacts"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~24.10.1",
            "binary_name": "dotnet-sdk-dbg-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.10.1",
            "binary_name": "dotnet-targeting-pack-8.0"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~24.10.1",
            "binary_name": "dotnet-templates-8.0"
        },
        {
            "binary_version": "8.0.112-8.0.12-0ubuntu1~24.10.1",
            "binary_name": "dotnet8"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~24.10.1",
            "binary_name": "netstandard-targeting-pack-2.1-8.0"
        }
    ]
}

Ubuntu:24.10 / dotnet9

Package

Name: dotnet9
Purl: pkg:deb/ubuntu/dotnet9@9.0.102-9.0.1-0ubuntu1~24.10.1?arch=source&distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.0.102-9.0.1-0ubuntu1~24.10.1

Affected versions

9.*

9.0.100-9.0.0~rc1-0ubuntu1

9.0.100-9.0.0~rc1-0ubuntu2

9.0.100-9.0.0~rc2-0ubuntu1

9.0.100-9.0.0-0ubuntu1~24.10.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "9.0.1-0ubuntu1~24.10.1",
            "binary_name": "aspnetcore-runtime-9.0"
        },
        {
            "binary_version": "9.0.1-0ubuntu1~24.10.1",
            "binary_name": "aspnetcore-runtime-dbg-9.0"
        },
        {
            "binary_version": "9.0.1-0ubuntu1~24.10.1",
            "binary_name": "aspnetcore-targeting-pack-9.0"
        },
        {
            "binary_version": "9.0.1-0ubuntu1~24.10.1",
            "binary_name": "dotnet-apphost-pack-9.0"
        },
        {
            "binary_version": "9.0.1-0ubuntu1~24.10.1",
            "binary_name": "dotnet-apphost-pack-9.0-dbgsym"
        },
        {
            "binary_version": "9.0.1-0ubuntu1~24.10.1",
            "binary_name": "dotnet-host-9.0"
        },
        {
            "binary_version": "9.0.1-0ubuntu1~24.10.1",
            "binary_name": "dotnet-host-9.0-dbgsym"
        },
        {
            "binary_version": "9.0.1-0ubuntu1~24.10.1",
            "binary_name": "dotnet-hostfxr-9.0"
        },
        {
            "binary_version": "9.0.1-0ubuntu1~24.10.1",
            "binary_name": "dotnet-hostfxr-9.0-dbgsym"
        },
        {
            "binary_version": "9.0.1-0ubuntu1~24.10.1",
            "binary_name": "dotnet-runtime-9.0"
        },
        {
            "binary_version": "9.0.1-0ubuntu1~24.10.1",
            "binary_name": "dotnet-runtime-9.0-dbgsym"
        },
        {
            "binary_version": "9.0.1-0ubuntu1~24.10.1",
            "binary_name": "dotnet-runtime-dbg-9.0"
        },
        {
            "binary_version": "9.0.102-0ubuntu1~24.10.1",
            "binary_name": "dotnet-sdk-9.0"
        },
        {
            "binary_version": "9.0.102-0ubuntu1~24.10.1",
            "binary_name": "dotnet-sdk-9.0-dbgsym"
        },
        {
            "binary_version": "9.0.102-0ubuntu1~24.10.1",
            "binary_name": "dotnet-sdk-9.0-source-built-artifacts"
        },
        {
            "binary_version": "9.0.102-0ubuntu1~24.10.1",
            "binary_name": "dotnet-sdk-aot-9.0"
        },
        {
            "binary_version": "9.0.102-0ubuntu1~24.10.1",
            "binary_name": "dotnet-sdk-aot-9.0-dbgsym"
        },
        {
            "binary_version": "9.0.102-0ubuntu1~24.10.1",
            "binary_name": "dotnet-sdk-dbg-9.0"
        },
        {
            "binary_version": "9.0.1-0ubuntu1~24.10.1",
            "binary_name": "dotnet-targeting-pack-9.0"
        },
        {
            "binary_version": "9.0.102-0ubuntu1~24.10.1",
            "binary_name": "dotnet-templates-9.0"
        },
        {
            "binary_version": "9.0.102-9.0.1-0ubuntu1~24.10.1",
            "binary_name": "dotnet9"
        },
        {
            "binary_version": "9.0.102-0ubuntu1~24.10.1",
            "binary_name": "netstandard-targeting-pack-2.1-9.0"
        }
    ]
}

Ubuntu:24.04:LTS / dotnet8

Package

Name: dotnet8
Purl: pkg:deb/ubuntu/dotnet8@8.0.112-8.0.12-0ubuntu1~24.04.1?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8.0.112-8.0.12-0ubuntu1~24.04.1

Affected versions

8.*

8.0.100-8.0.0~rc1-0ubuntu1

8.0.100-8.0.0~rc2-0ubuntu1

8.0.100-8.0.0~rc2-0ubuntu2

8.0.100-8.0.0-0ubuntu1

8.0.100-8.0.0-0ubuntu2

8.0.101-8.0.1-0ubuntu1

8.0.101-8.0.1-0ubuntu2

8.0.102-8.0.2-0ubuntu1

8.0.103-8.0.3-0ubuntu2

8.0.103-8.0.3-0ubuntu3

8.0.104-8.0.4-0ubuntu1

8.0.105-8.0.5-0ubuntu1~24.04.1

8.0.107-8.0.7-0ubuntu1~24.04.1

8.0.108-8.0.8-0ubuntu1~24.04.1

8.0.108-8.0.8-0ubuntu1~24.04.2

8.0.110-8.0.10-0ubuntu1~24.04.1

8.0.111-8.0.11-0ubuntu1~24.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "8.0.12-0ubuntu1~24.04.1",
            "binary_name": "aspnetcore-runtime-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.04.1",
            "binary_name": "aspnetcore-runtime-dbg-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.04.1",
            "binary_name": "aspnetcore-targeting-pack-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.04.1",
            "binary_name": "dotnet-apphost-pack-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.04.1",
            "binary_name": "dotnet-apphost-pack-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.04.1",
            "binary_name": "dotnet-host-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.04.1",
            "binary_name": "dotnet-host-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.04.1",
            "binary_name": "dotnet-hostfxr-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.04.1",
            "binary_name": "dotnet-hostfxr-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.04.1",
            "binary_name": "dotnet-runtime-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.04.1",
            "binary_name": "dotnet-runtime-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.04.1",
            "binary_name": "dotnet-runtime-dbg-8.0"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~24.04.1",
            "binary_name": "dotnet-sdk-8.0"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~24.04.1",
            "binary_name": "dotnet-sdk-8.0-dbgsym"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~24.04.1",
            "binary_name": "dotnet-sdk-8.0-source-built-artifacts"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~24.04.1",
            "binary_name": "dotnet-sdk-dbg-8.0"
        },
        {
            "binary_version": "8.0.12-0ubuntu1~24.04.1",
            "binary_name": "dotnet-targeting-pack-8.0"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~24.04.1",
            "binary_name": "dotnet-templates-8.0"
        },
        {
            "binary_version": "8.0.112-8.0.12-0ubuntu1~24.04.1",
            "binary_name": "dotnet8"
        },
        {
            "binary_version": "8.0.112-0ubuntu1~24.04.1",
            "binary_name": "netstandard-targeting-pack-2.1-8.0"
        }
    ]
}