The Microsoft ASP.NET Core installation on the remote host is version 2.1.x prior to 2.1.29, 3.1.x prior to 3.1.18, or 5.x prior to 5.0.9. It is, therefore, affected by multiple vulnerabilities:

  - A denial of service (DoS) vulnerability. An attacker can exploit this issue to cause the affected     component to deny system or application services. (CVE-2021-26423)

  - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive     information. (CVE-2021-34485, CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3142 advisory.

  - dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

  - dotnet: Dump file created world-readable (CVE-2021-34485)

  - dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3147 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 5.0.206 and .NET Runtime 5.0.9.

    Security Fix(es):

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3142 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 3.1.118 and .NET Runtime 3.1.18.

    Security Fix(es):

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0062 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-26423:
    .NET Core and Visual Studio Denial of Service Vulnerability

    CVE-2021-34485:
    .NET Core and Visual Studio Information Disclosure Vulnerability

    CVE-2021-34532:
    ASP.NET Core and Visual Studio Information Disclosure Vulnerability

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2360:10 advisory.

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)
      * dotnet: Dump file created world-readable (CVE-2021-34485)
      * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3143 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 3.1.118 and .NET Runtime 3.1.18.

    Security Fix(es):

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:3148 advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2021-26423)

  - .NET Core and Visual Studio Information Disclosure Vulnerability (CVE-2021-34485)

  - ASP.NET Core and Visual Studio Information Disclosure Vulnerability (CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2354:08 advisory.

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)
      * dotnet: Dump file created world-readable (CVE-2021-34485)
      * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing a security update. They are, therefore, affected by multiple vulnerabilities:

  - A denial of service (DoS) vulnerability. An attacker can exploit this issue to cause the affected component to deny     system or application services. (CVE-2021-26423)

  - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive     information. (CVE-2021-34485, CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3148 advisory.

    [5.0.206-1.0.1]
    - Add support for new Oracle release

    [5.0.206-1]
    - Update to .NET SDK 5.0.206 and Runtime 5.0.9
    - Resolves: RHBZ#1990965

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
152528	Security Update for Microsoft ASP.NET Core (August 2021)	Nessus	Windows	2021/8/12	2023/10/13	medium
152591	CentOS 8 : .NET Core 3.1 (CESA-2021:3142)	Nessus	CentOS Local Security Checks	2021/8/16	2021/8/19	medium
152592	RHEL 7 : .NET 5.0 on RHEL 7 (RHSA-2021:3147)	Nessus	Red Hat Local Security Checks	2021/8/16	2024/11/7	medium
152595	RHEL 8 : .NET Core 3.1 (RHSA-2021:3142)	Nessus	Red Hat Local Security Checks	2021/8/16	2024/11/7	medium
236416	Alibaba Cloud Linux 3 : 0062: .NET Core 3.1 (ALINUX3-SA-2021:0062)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	medium
294605	MiracleLinux 8 : dotnet5.0-5.0.206-1.el8.ML.1 (AXSA:2021-2360:10)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
152605	RHEL 7 : .NET Core 3.1 on RHEL 7 (RHSA-2021:3143)	Nessus	Red Hat Local Security Checks	2021/8/16	2024/11/7	medium
157752	Rocky Linux 8 : .NET 5.0 (RLSA-2021:3148)	Nessus	Rocky Linux Local Security Checks	2022/2/9	2023/10/13	medium
294166	MiracleLinux 8 : dotnet3.1-3.1.118-1.el8.ML.1 (AXSA:2021-2354:08)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
152423	Security Updates for Microsoft Visual Studio Products (August 2021)	Nessus	Windows : Microsoft Bulletins	2021/8/10	2021/9/16	medium
152548	Oracle Linux 8 : .NET / 5.0 (ELSA-2021-3148)	Nessus	Oracle Linux Local Security Checks	2021/8/13	2024/10/23	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium