The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-f9ca76e479 advisory.

    This is the October 2022 release of .NET Core 3.1

    This updates .NET Core 3.1 SDK to 3.1.424 and Runtime to 3.1.30.

    This includes fixes for CVE-2022-41032

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-6913 advisory.

    [6.0.110-1.0.1]
    - Add missing Oracle RIDs
    - Build all packages on source-build even when in servicing

    [6.0.110-1]
    - Update to .NET SDK 6.0.110 and Runtime 6.0.10
    - Resolves: RHBZ#2131328

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An elevation of privilege vulnerability exists in the Microsoft Visual Studio application installed on the host. A local attacker can gain the privileges of the user running the Microsoft Visual Studio application.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6912 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK  3.1.424  and .NET Runtime 3.1.30.

    Security Fix(es):

    * dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8434 advisory.

    [7.0.100-0.5.rc2.0.1]
    - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152]

    [7.0.100-0.5.rc2]
    - Add lldb as a build dependency
    - Related: RHBZ#2134641

    [7.0.100-0.4.rc2]
    - Enable ppc64le builds
    - Related: RHBZ#2134641

    [7.0.100-0.3.rc2]
    - Update to .NET 7 RC 2
    - Resolves: RHBZ#2134641

    [7.0.100-0.2.rc1]
    - Update to .NET 7 RC 1
    - Enable s390x builds
    - Resolves: RHBZ#2123884

    [7.0.100-0.1]
    - Initial .NET 7 package
    - Resolves: RHBZ#2112027

    [6.0.105-1]
    - Update to .NET SDK 6.0.105 and Runtime 6.0.5

    [6.0.104-1]
    - Update to .NET SDK 6.0.104 and Runtime 6.0.4

    [6.0.103-1]
    - Update to .NET SDK 6.0.103 and Runtime 6.0.3

    [6.0.102-1]
    - Update to .NET SDK 6.0.102 and Runtime 6.0.2

    [6.0.101-3]
    - Update to .NET SDK 6.0.101 and Runtime 6.0.1

    [6.0.100-3]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

    [6.0.100-2]
    - Disable bootstrap

    [6.0.100-1]
    - Update to .NET 6

    [6.0.0-0.7.rc2]
    - Update to .NET 6 RC2

    [6.0.0-0.6.28be3e9a006d90d8c6e87d4353b77882829df718]
    - Enable building on arm64
    - Related: RHBZ#1986017

    [6.0.0-0.5.28be3e9a006d90d8c6e87d4353b77882829df718]
    - Enable building on s390x
    - Related: RHBZ#1986017

    [6.0.0-0.4.28be3e9a006d90d8c6e87d4353b77882829df718]
    - Clean up tarball and add initial support for s390x
    - Related: RHBZ#1986017

    [6.0.0-0.3.28be3e9a006d90d8c6e87d4353b77882829df718]
    - Update to work-in-progress RC2 release

    [6.0.0-0.2.preview6]
    - Updated to build the latest source-build preview

    [6.0.0-0.1.preview6]
    - Initial package for .NET 6

    [5.0.204-1]
    - Update to .NET SDK 5.0.204 and Runtime 5.0.7

    [5.0.203-1]
    - Update to .NET SDK 5.0.203 and Runtime 5.0.6

    [5.0.202-1]
    - Update to .NET SDK 5.0.202 and Runtime 5.0.5

    [5.0.104-2]
    - Mark files under /etc/ as config(noreplace)
    - Add an rpm-inspect configuration file
    - Add an rpmlintrc file
    - Enable gating for release branches and ELN too

    [5.0.104-1]
    - Update to .NET SDK 5.0.104 and Runtime 5.0.4
    - Drop unneeded/upstreamed patches

    [5.0.103-2]
    - Add Fedora 35 RIDs

    [5.0.103-1]
    - Update to .NET SDK 5.0.103 and Runtime 5.0.3

    [5.0.102-2]
    - Disable bootstrap

    [5.0.100-2]
    - Update to .NET Core Runtime 5.0.0 and SDK 5.0.100 commit 9c4e5de

    [5.0.100-1]
    - Update to .NET Core Runtime 5.0.0 and SDK 5.0.100

    [5.0.100-0.4.20201202git337413b]
    - Update to latest 5.0 pre-GA commit

    [5.0.100-0.4.20201123gitdee899c]
    - Update to 5.0 pre-GA commit

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-d80b1d2827 advisory.

    This is the monthly .NET 6 update for September 2022. It updates the .NET SDK to 6.0.109 and Runtime to     6.0.9.

    This includes a fix for CVE-2022-38013

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:6913 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-4169:19 advisory.

    * dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A privilege escalation vulnerability exists in .NET core 6.0 < 6.0.10 and .NET Core 3.1 < 3.1.30. An authenticated, local attacker can exploit this, via the NuGet client, to cause the user to execute arbitrary code.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6915 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK  6.0.110 and .NET Runtime 6.0.10.

    Security Fix(es):

    * dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6911 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK  6.0.110 and .NET Runtime 6.0.10.

    Security Fix(es):

    * dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8434 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 7.0.100 RC 2 and .NET Runtime 7.0.0 RC 2.

    The following packages have been upgraded to a later upstream version: dotnet7.0 (7.0.100). (BZ#2134641)

    Security Fix(es):

    * dotnet: Nuget cache poisoning on Linux via world-writable cache directory (CVE-2022-41032)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:6913 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7826 advisory.

    [7.0.100-0.4.rc2.0.1]
    - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152]

    [7.0.100-0.4.rc2]
    - Enable ppc64le builds
    - Related: RHBZ#2134642

    [7.0.100-0.3.rc2]
    - Update to .NET 7 RC 2
    - Resolves: RHBZ#2134642

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:6911 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-7f5f9ede26 advisory.

    This is the October 2022 release of .NET Core 3.1

    This updates .NET Core 3.1 SDK to 3.1.424 and Runtime to 3.1.30.

    This includes fixes for CVE-2022-41032


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:6912 advisory.

  - NuGet Client Elevation of Privilege Vulnerability. (CVE-2022-41032)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
169060	Fedora 36 : dotnet3.1 (2022-f9ca76e479)	Nessus	Fedora Local Security Checks	2022/12/22	2024/11/14	high
166090	Oracle Linux 9 : .NET / 6.0 (ELSA-2022-6913)	Nessus	Oracle Linux Local Security Checks	2022/10/13	2024/10/22	high
166116	Security Updates for Microsoft Visual Studio Products (Oct 2022)	Nessus	Windows : Microsoft Bulletins	2022/10/14	2023/10/9	high
166148	RHEL 8 : .NET Core 3.1 (RHSA-2022:6912)	Nessus	Red Hat Local Security Checks	2022/10/15	2024/11/7	high
168235	Oracle Linux 9 : dotnet7.0 (ELSA-2022-8434)	Nessus	Oracle Linux Local Security Checks	2022/11/29	2024/10/22	high
169167	Fedora 36 : dotnet6.0 (2022-d80b1d2827)	Nessus	Fedora Local Security Checks	2022/12/22	2024/11/14	high
184663	Rocky Linux 9 : .NET 6.0 (RLSA-2022:6913)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	high
292274	MiracleLinux 9 : dotnet6.0-6.0.110-1.el9.ML.1 (AXSA:2022-4169:19)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
166054	Security Updates for Microsoft .NET Core (October 2022)	Nessus	Windows	2022/10/12	2024/1/16	high
166149	RHEL 7 : .NET 6.0 on RHEL 7 (RHSA-2022:6915)	Nessus	Red Hat Local Security Checks	2022/10/15	2024/11/7	high
166152	RHEL 8 : .NET 6.0 (RHSA-2022:6911)	Nessus	Red Hat Local Security Checks	2022/10/15	2024/11/7	high
167645	RHEL 9 : dotnet7.0 (RHSA-2022:8434)	Nessus	Red Hat Local Security Checks	2022/11/16	2024/11/7	high
167717	AlmaLinux 9 : .NET 6.0 (ALSA-2022:6913)	Nessus	Alma Linux Local Security Checks	2022/11/16	2023/10/3	high
167784	Oracle Linux 8 : dotnet7.0 (ELSA-2022-7826)	Nessus	Oracle Linux Local Security Checks	2022/11/17	2024/10/22	high
167824	Rocky Linux 8 : .NET 6.0 (RLSA-2022:6911)	Nessus	Rocky Linux Local Security Checks	2022/11/17	2023/11/7	high
169213	Fedora 35 : dotnet3.1 (2022-7f5f9ede26)	Nessus	Fedora Local Security Checks	2022/12/23	2024/11/14	high
184815	Rocky Linux 8 : .NET Core 3.1 (RLSA-2022:6912)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2023/11/7	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high