The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4642 advisory.

    [7.0.110-1.0.1]
    - Update to .NET SDK 7.0.110 and Runtime 7.0.10
    - Resolves: RHBZ#2228571

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-cbc688b8ca advisory.

    This is the August 2023 update for .NET 6 and .NET 7.

    Release Notes:

    - 7.0 SDK: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.10/7.0.110.md
    - 7.0 Runtime: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.10/7.0.10.md
    - 6.0 SDK: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.21/6.0.121.md
    - 6.0 Runtime: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.21/6.0.21.md

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-326 advisory.

    .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2023-35390)

    .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2023-38178)

    .NET and Visual Studio Denial of Service Vulnerability (CVE-2023-38180)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4643 advisory.

  - .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2023-35390)

  - .NET and Visual Studio Denial of Service Vulnerability (CVE-2023-38180)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0175 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2023-35390:
      .NET and Visual Studio Remote Code Execution Vulnerability

      CVE-2023-38180:
      .NET and Visual Studio Denial of Service Vulnerability

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023_Aug_08 advisory.

  - .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2023-35390)

  - ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability (CVE-2023-35391)

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2023-38178)

  - .NET and Visual Studio Denial of Service Vulnerability (CVE-2023-38180)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4642 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 7.0.110 and .NET Runtime 7.0.10.

    Security Fix(es):

    * dotnet: RCE under dotnet commands (CVE-2023-35390)

    * dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4645 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.121 and .NET Runtime 6.0.21.

    Security Fix(es):

    * dotnet: RCE under dotnet commands (CVE-2023-35390)

    * dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4643 advisory.

    [7.0.110-1.0.1]
    - Update to .NET SDK 7.0.110 and Runtime 7.0.10
    - Resolves: RHBZ#2228571

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0680 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-36435:
    Microsoft QUIC Denial of Service Vulnerability

    CVE-2023-38171:
    Microsoft QUIC Denial of Service Vulnerability

    CVE-2023-44487:
    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation     can reset many streams quickly, as exploited in the wild in August through October 2023.

    CVE-2023-36792:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36793:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36794:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36796:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36799:
    .NET Core and Visual Studio Denial of Service Vulnerability

    CVE-2023-38180:
    .NET and Visual Studio Denial of Service Vulnerability

    CVE-2023-35391:
    ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

    CVE-2023-38178:
    .NET Core and Visual Studio Denial of Service Vulnerability

    CVE-2023-35390:
    .NET and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-33170:
    ASP.NET and Visual Studio Security Feature Bypass Vulnerability

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - .NET Core and Visual Studio Denial of Service Vulnerability. (CVE-2023-38178)

  - .NET and Visual Studio Remote Code Execution Vulnerability. (CVE-2023-35390)

  - .NET and Visual Studio Denial of Service Vulnerability. (CVE-2023-38180)

  - ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability. (CVE-2023-35391)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6278-2 advisory.

    USN-6278-1 fixed several vulnerabilities in .NET. This update provides the corresponding updates for     Ubuntu 22.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4640 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    Security Fix(es):

    * dotnet: RCE under dotnet commands (CVE-2023-35390)

    * dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack (CVE-2023-38180)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-25112489ab advisory.

    This is the August 2023 update for .NET 6 and .NET 7.

    Release Notes:

    - 7.0 SDK: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.10/7.0.110.md
    - 7.0 Runtime: https://github.com/dotnet/core/blob/main/release-notes/7.0/7.0.10/7.0.10.md
    - 6.0 SDK: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.21/6.0.121.md
    - 6.0 Runtime: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.21/6.0.21.md

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4645 advisory.

  - .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2023-35390)

  - .NET and Visual Studio Denial of Service Vulnerability (CVE-2023-38180)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6345:24 advisory.

    * dotnet: RCE under dotnet commands (CVE-2023-35390)
      * dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack     (CVE-2023-38180)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6350:21 advisory.

    dotnet: RCE under dotnet commands (CVE-2023-35390)         dotnet: Kestrel vulnerability to slow read attacks leading to Denial of     Service attack (CVE-2023-38180)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0677 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-44487:
    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation     can reset many streams quickly, as exploited in the wild in August through October 2023.

    CVE-2023-36794:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-38180:
    .NET and Visual Studio Denial of Service Vulnerability

    CVE-2023-35390:
    .NET and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-33170:
    ASP.NET and Visual Studio Security Feature Bypass Vulnerability

    CVE-2023-33127:
    .NET and Visual Studio Elevation of Privilege Vulnerability

    CVE-2023-29337:
    NuGet Client Remote Code Execution Vulnerability

    CVE-2023-24895:
    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-24897:
    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-33135:
    .NET and Visual Studio Elevation of Privilege Vulnerability

    CVE-2023-33126:
    .NET and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36792:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36793:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36796:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36799:
    .NET Core and Visual Studio Denial of Service Vulnerability

    CVE-2023-35391:
    ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
179891	Oracle Linux 9 : .NET / 7.0 (ELSA-2023-4642)	Nessus	Oracle Linux Local Security Checks	2023/8/16	2025/10/22	high
179996	Fedora 38 : dotnet6.0 / dotnet7.0 (2023-cbc688b8ca)	Nessus	Fedora Local Security Checks	2023/8/20	2025/10/22	high
181148	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-326)	Nessus	Amazon Linux Local Security Checks	2023/9/8	2025/10/22	high
182722	Rocky Linux 8 : .NET 7.0 (RLSA-2023:4643)	Nessus	Rocky Linux Local Security Checks	2023/10/6	2025/10/22	high
276385	TencentOS Server 3: .NET 7.0 (TSSA-2023:0175)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	high
179502	Security Update for Microsoft .NET Core (August 2023)	Nessus	Windows	2023/8/8	2025/1/1	high
179811	RHEL 9 : .NET 7.0 (RHSA-2023:4642)	Nessus	Red Hat Local Security Checks	2023/8/14	2025/10/22	high
179814	RHEL 8 : .NET 6.0 (RHSA-2023:4645)	Nessus	Red Hat Local Security Checks	2023/8/14	2025/10/22	high
179878	Oracle Linux 8 : .NET / 7.0 (ELSA-2023-4643)	Nessus	Oracle Linux Local Security Checks	2023/8/15	2025/10/22	high
239454	TencentOS Server 4: dotnet7.0 (TSSA-2024:0680)	Nessus	Tencent Local Security Checks	2025/6/16	2025/12/4	medium
179645	Security Updates for Microsoft Visual Studio Products (August 2023)	Nessus	Windows : Microsoft Bulletins	2023/8/10	2025/1/1	high
179691	Ubuntu 22.04 LTS : .NET vulnerabilities (USN-6278-2)	Nessus	Ubuntu Local Security Checks	2023/8/11	2025/10/22	high
179809	RHEL 8 : .NET 6.0 (RHSA-2023:4640)	Nessus	Red Hat Local Security Checks	2023/8/14	2025/10/22	high
179998	Fedora 37 : dotnet6.0 / dotnet7.0 (2023-25112489ab)	Nessus	Fedora Local Security Checks	2023/8/20	2025/10/22	high
182726	Rocky Linux 8 : .NET 6.0 (RLSA-2023:4645)	Nessus	Rocky Linux Local Security Checks	2023/10/6	2025/10/22	high
292438	MiracleLinux 9 : dotnet7.0-7.0.110-1.el9.ML.1 (AXSA:2023-6345:24)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
293391	MiracleLinux 9 : dotnet6.0-6.0.121-1.el9.ML.1 (AXSA:2023-6350:21)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
239977	TencentOS Server 4: dotnet6.0 (TSSA-2024:0677)	Nessus	Tencent Local Security Checks	2025/6/16	2025/12/4	medium

检测

插件搜索

high

high

high

high

high

high

high

high

high

medium

high

high

high

high

high

high

high

medium