遠端 Redhat Enterprise Linux 7 主機上安裝的多個套件受到 RHSA-2022: 6037 公告中提及的多個弱點影響。

  - eventsource：敏感資訊洩漏 (CVE-2022-1650)

  - dotnet：在 XML 驗證期間發生外部實體插入 (CVE-2022-34716) 

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Oracle Linux 9 主機上安裝的套件受到 ELSA-2022-6043 公告中提及的一個弱點影響。

  - .NET 偽造弱點。(CVE-2022-34716)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Oracle Linux 8 主機上安裝的套件受到 ELSA-2022-6057 公告中提及的一個弱點影響。

  - .NET 偽造弱點。(CVE-2022-34716)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 AlmaLinux 8 主機已安裝受 ALSA-2022:6058 公告中提及的一個弱點影響的套件。

  - .NET 偽造弱點。(CVE-2022-34716)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6037 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 3.1.422 and .NET Runtime 3.1.28.

    Security Fix(es):

    * dotnet: External Entity Injection during XML signature verification (CVE-2022-34716)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6043 advisory.

    [6.0.108-1.0.1]
    - Add missing Oracle RIDs
    - Build all packages on source-build even when in servicing

    [6.0.108-1]
    - Update to .NET SDK 6.0.108 and Runtime 6.0.8
    - Resolves: RHBZ#2112413

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6057 advisory.

    [3.1.422-1.0.1]
    - Add missing Oracle Linux Runtime IDs

    [3.1.422-1]
    - Update to .NET SDK 3.1.422 and Runtime 3.1.28
    - Resolves: RHBZ#2115351

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:6058 advisory.

  - .NET Spoofing Vulnerability. (CVE-2022-34716)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the dotnet package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
164009	RHEL 7：.NET Core 3.1 (RHSA-2022: 6037)	Nessus	Red Hat Local Security Checks	2022/8/10	2024/11/7	critical
164035	Oracle Linux 9：.NET / 6.0 (ELSA-2022-6043)	Nessus	Oracle Linux Local Security Checks	2022/8/10	2024/10/22	medium
164142	Oracle Linux 8：.NET/Core/3.1 (ELSA-2022-6057)	Nessus	Oracle Linux Local Security Checks	2022/8/16	2024/10/22	medium
164270	AlmaLinux 8 : .NET 6.0 (6058) (ALSA-2022:6058)	Nessus	Alma Linux Local Security Checks	2022/8/18	2022/12/6	medium
164009	RHEL 7 : .NET Core 3.1 (RHSA-2022:6037)	Nessus	Red Hat Local Security Checks	2022/8/10	2024/11/7	critical
164035	Oracle Linux 9 : .NET / 6.0 (ELSA-2022-6043)	Nessus	Oracle Linux Local Security Checks	2022/8/10	2024/10/22	medium
164142	Oracle Linux 8 : .NET / Core / 3.1 (ELSA-2022-6057)	Nessus	Oracle Linux Local Security Checks	2022/8/16	2024/10/22	medium
164270	AlmaLinux 8 : .NET 6.0 (6058) (ALSA-2022:6058)	Nessus	Alma Linux Local Security Checks	2022/8/18	2022/12/6	medium
237067	Photon OS 4.0: Dotnet PHSA-2025-4.0-0804	Nessus	PhotonOS Local Security Checks	2025/5/22	2025/6/13	high

检测

插件搜索

critical

medium

medium

medium

critical

medium

medium

medium

high