The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including:

  - .NET Denial of Service Vulnerability in System.Security.Cryptography.Cose,     System.IO.Packaging, System.Runtime.Caching (CVE-2024-43483)   
  - .NET Denial of Service Vulnerability in System.IO.Packaging (CVE-2024-43484)

  - Elevation of Privilege Vulnerability in Visual Studio C++ Redistributable Installer (CVE-2024-43590)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8897:18 advisory.

    * dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution     (CVE-2024-38229)
      * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
      * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
      * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2024_7868 advisory.

    * dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution     (CVE-2024-38229)
    * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
    * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
    * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

    * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)

    * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)

    * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

    * dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution     (CVE-2024-38229)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:7869 advisory.

    * dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution     (CVE-2024-38229)
    * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
    * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
    * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.Security Fix(es):

    * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)

    * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)

    * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

    * dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution     (CVE-2024-38229)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-777 advisory.

    .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2024-38229)

    .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability (CVE-2024-43483)

    .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability (CVE-2024-43484)

    .NET and Visual Studio Denial of Service Vulnerability (CVE-2024-43485)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8898:17 advisory.

    * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
      * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)
      * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8896:17 advisory.

    * dotnet: kestrel: closing an HTTP/3 stream can cause a race condition and lead to remote code execution     (CVE-2024-38229)
      * dotnet: Multiple .NET components susceptible to hash flooding (CVE-2024-43483)
      * dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList (CVE-2024-43484)
      * dotnet: Denial of Service in System.Text.Json (CVE-2024-43485)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1265 advisory.

    This advisory aggregates security fixes for the dotnet6.0 SRPM in CIQ LTS 8.6. It addresses 4 CVEs:
    CVE-2024-43485, CVE-2024-43484, CVE-2024-43483, CVE-2023-46233.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1017 advisory.

    This advisory aggregates security fixes for the dotnet6.0 SRPM in CIQ LTS 8.6. It addresses 4 CVEs:
    CVE-2024-43485, CVE-2024-43484, CVE-2024-43483, CVE-2023-46233.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1018 advisory.

    This advisory aggregates security fixes for the dotnet6.0 SRPM in CIQ LTS 9.2. It addresses 6 CVEs:
    CVE-2024-43485, CVE-2024-43484, CVE-2024-43483, CVE-2024-0057, CVE-2024-0056, and 1 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
208750	Security Updates for Microsoft Visual Studio Products (October 2024)	Nessus	Windows : Microsoft Bulletins	2024/10/11	2024/11/15	high
293263	MiracleLinux 9 : dotnet8.0-8.0.110-1.el9_4.ML.1 (AXSA:2024-8897:18)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
359045	Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2024_7868)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	critical
209700	RockyLinux 9 : .NET 8.0 (RLSA-2024:7869)	Nessus	Rocky Linux Local Security Checks	2024/10/25	2025/5/7	high
212354	Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2024-777)	Nessus	Amazon Linux Local Security Checks	2024/12/11	2025/5/7	high
292962	MiracleLinux 9 : dotnet6.0-6.0.135-1.el9_4.ML.1 (AXSA:2024-8898:17)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
293250	MiracleLinux 8 : dotnet8.0-8.0.110-1.el8_10.ML.1 (AXSA:2024-8896:17)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
356478	Rocky Linux 8.6 [CIQ] Security Update: dotnet-host / dotnet-host-debuginfo Multiple Vulnerabilities (ciqsa-2026_1265)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
353698	Rocky Linux 8.6 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / dotnet / etc Multiple Vulnerabilities (ciqsa-2026_1017)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
354790	Rocky Linux 9.2 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / etc Multiple Vulnerabilities (ciqsa-2026_1018)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high

检测

插件搜索

high

critical

critical

high

high

high

critical

high

high

high