CVE-2023-33128
Publication date 13 June 2023
Last updated 26 August 2025
Ubuntu priority
Cvss 3 Severity Score
Description
.NET and Visual Studio Remote Code Execution Vulnerability
Status
| Package | Ubuntu Release | Status | 
|---|---|---|
| dotnet6 | ||
| 22.04 LTS jammy | 
                                Fixed 6.0.118-0ubuntu1~22.04.1 
                                
                               | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| dotnet7 | ||
| 22.04 LTS jammy | 
                                Fixed 7.0.107-0ubuntu1~22.04.1 
                                
                               | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | 
Severity score breakdown
| Parameter | Value | 
|---|---|
| Base score |  | 
| Attack vector | Local | 
| Attack complexity | Low | 
| Privileges required | Low | 
| User interaction | Required | 
| Scope | Unchanged | 
| Confidentiality | High | 
| Integrity impact | High | 
| Availability impact | High | 
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H | 
References
Related Ubuntu Security Notices (USN)
- USN-6161-1
- .NET vulnerabilities
- 13 June 2023