CVE-2024-38229 (HIGH): detected in Lambda Docker Images.

[the-lambda-watchdog]

CVE Details

CVE ID	Severity	Affected Package	Installed Version	Fixed Version	Date Published	Date of Scan
CVE-2024-38229	HIGH	Microsoft.AspNetCore.App.Runtime.linux-x64	8.0.8	9.0.0-rc.2.24474.3, 8.0.10	2024-10-08T18:15:08.153Z	2024-10-09T12:07:08.844786292Z

---

Affected Docker Images

Image Name	SHA
public.ecr.aws/lambda/dotnet:latest	public.ecr.aws/lambda/dotnet@sha256:ff2274b4bd725defd569c032d1d310f3fd6a491957875ee0d110e145a8ba82ff
public.ecr.aws/lambda/dotnet:8	public.ecr.aws/lambda/dotnet@sha256:ff2274b4bd725defd569c032d1d310f3fd6a491957875ee0d110e145a8ba82ff

---

Description

.NET and Visual Studio Remote Code Execution Vulnerability

---

Remediation Steps

• Update the affected package Microsoft.AspNetCore.App.Runtime.linux-x64 from version 8.0.8 to 9.0.0-rc.2.24474.3, 8.0.10.

About this issue

• This issue may not contain all the information about the CVE nor the images it affects.
• This issue will not be updated with new information and the list of affected images may have changed since the creation of this issue.
• For more, visit Lambda Watchdog.
• This issue was created automatically by Lambda Watchdog.