topic .NET DOS vulnarabilities CVE-2023-36042 in Management & Governance

.NET DOS vulnarabilities CVE-2023-36042

dobak — Thu, 08 Feb 2024 11:41:34 GMT

Hi, our customer is running Qlik Sense Enterprise May 2023 patch 11 and has performance and stability issues of Qlik when running a security/vulnerability scan on the infrastructure.

This is the list of .net related issues found by the scanner: CVE-2023-36042, CVE-2024-21312, CVE-2024-0056, CVE-2024-0057

Would patching to 13 fix this? Which version of .net is in Patch 13 for May 2023?

In general is there a list of .net versions supplied by the Qlik installers?

Re: .NET DOS vulnarabilities CVE-2023-36042

Deeksha_JayaSapalya — Mon, 12 Feb 2024 06:31:41 GMT

Hi @dobak

The supported .net framework for may 2023 Qlik Sense is 4.8. Please refer the system requirement for additional info.
System requirements for Qlik Sense Enterprise

However, I could not find the provided CVE reported in our forum so would request you to submit a case along with the report mentioned in the below article
Qlik Security Vulnerability Policy

I hope this helps!

Best Regards,
Deeksha

Re: .NET DOS vulnarabilities CVE-2023-36042

dobak — Thu, 15 Feb 2024 07:55:32 GMT

according to the answer from support this should be fixed from Nov 2023 + the latest patch.