The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-18148 advisory.

    [8.0.121-1.0.1]
    - Add support for Oracle Linux

    [8.0.121-1]
    - Update to .NET SDK 8.0.121 and Runtime 8.0.21
    - Resolves: RHEL-116865

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:18150 advisory.

    * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)

    * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)

    * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:18149 advisory.

    * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)

    * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)

    * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1231 advisory.

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to     elevate privileges locally. (CVE-2025-55247)

    Inadequate encryption strength in .NET, .NET Framework, Visual Studio allows an authorized attacker to     disclose information over a network. (CVE-2025-55248)

    Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an     authorized attacker to bypass a security feature over a network. (CVE-2025-55315)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18151 advisory.

    * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)
      * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)
      * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:18153 advisory.

    * dotnet: .NET Information Disclosure Vulnerability (CVE-2025-55248)
      * dotnet: .NET Security Feature Bypass Vulnerability (CVE-2025-55315)
      * dotnet: .NET Denial of Service Vulnerability (CVE-2025-55247)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
270669	Oracle Linux 8 : .NET / 8.0 (ELSA-2025-18148)	Nessus	Oracle Linux Local Security Checks	2025/10/16	2026/2/24	critical
270682	RockyLinux 8 : .NET 9.0 (RLSA-2025:18150)	Nessus	Rocky Linux Local Security Checks	2025/10/17	2026/2/24	critical
270754	RockyLinux 9 : .NET 8.0 (RLSA-2025:18149)	Nessus	Rocky Linux Local Security Checks	2025/10/18	2026/2/24	critical
271270	Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2025-1231)	Nessus	Amazon Linux Local Security Checks	2025/10/23	2026/2/24	high
272198	AlmaLinux 9 : .NET 9.0 (ALSA-2025:18151)	Nessus	Alma Linux Local Security Checks	2025/11/3	2026/2/24	high
272217	AlmaLinux 10 : .NET 9.0 (ALSA-2025:18153)	Nessus	Alma Linux Local Security Checks	2025/11/3	2026/2/24	high

检测

插件搜索

critical

critical

critical

high

high

high