The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:5145 advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2023-36799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5144 advisory.

    [6.0.122-1.0.1]
    - Update to .NET SDK 6.0.122 and Runtime 6.0.22
    - Resolves: RHEL-1996

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-369 advisory.

    Visual Studio Remote Code Execution Vulnerability (CVE-2023-36792)

    Visual Studio Remote Code Execution Vulnerability (CVE-2023-36793)

    Visual Studio Remote Code Execution Vulnerability (CVE-2023-36794)

    Visual Studio Remote Code Execution Vulnerability (CVE-2023-36796)

    .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2023-36799)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6246 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 7.0.113 and .NET Runtime 7.0.13.

    Security Fix(es):

    * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:6246 advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2023-36799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6245 advisory.

    [6.0.124-1.0.1]
    - Update to .NET SDK 6.0.124 and Runtime 6.0.24
    - Resolves: RHEL-14466

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:6245 advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2023-36799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6567:31 advisory.

    * dotnet: Denial of Service with Client Certificates using .NET Kestrel (CVE-2023-36799)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0677 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-44487:
    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation     can reset many streams quickly, as exploited in the wild in August through October 2023.

    CVE-2023-36794:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-38180:
    .NET and Visual Studio Denial of Service Vulnerability

    CVE-2023-35390:
    .NET and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-33170:
    ASP.NET and Visual Studio Security Feature Bypass Vulnerability

    CVE-2023-33127:
    .NET and Visual Studio Elevation of Privilege Vulnerability

    CVE-2023-29337:
    NuGet Client Remote Code Execution Vulnerability

    CVE-2023-24895:
    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-24897:
    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-33135:
    .NET and Visual Studio Elevation of Privilege Vulnerability

    CVE-2023-33126:
    .NET and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36792:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36793:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36796:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36799:
    .NET Core and Visual Studio Denial of Service Vulnerability

    CVE-2023-35391:
    ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
181438	AlmaLinux 8 : .NET 7.0 (ALSA-2023:5145)	Nessus	Alma Linux Local Security Checks	2023/9/14	2023/9/21	medium
181442	Oracle Linux 8 : .NET / 6.0 (ELSA-2023-5144)	Nessus	Oracle Linux Local Security Checks	2023/9/14	2025/9/9	medium
182447	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-369)	Nessus	Amazon Linux Local Security Checks	2023/10/3	2024/12/11	high
184203	RHEL 9 : .NET 7.0 (RHSA-2023:6246)	Nessus	Red Hat Local Security Checks	2023/11/2	2024/11/8	medium
184352	AlmaLinux 9 : .NET 7.0 (ALSA-2023:6246)	Nessus	Alma Linux Local Security Checks	2023/11/3	2023/11/3	medium
184450	Oracle Linux 8 : .NET / 6.0 (ELSA-2023-6245)	Nessus	Oracle Linux Local Security Checks	2023/11/6	2025/9/9	medium
185468	Rocky Linux 8 : .NET 6.0 (RLSA-2023:6245)	Nessus	Rocky Linux Local Security Checks	2023/11/11	2023/11/11	medium
293008	MiracleLinux 8 : dotnet7.0-7.0.113-1.el8.ML.1 (AXSA:2023-6567:31)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
239977	TencentOS Server 4: dotnet6.0 (TSSA-2024:0677)	Nessus	Tencent Local Security Checks	2025/6/16	2025/12/4	medium

检测

插件搜索

medium

medium

high

medium

medium

medium

medium

medium

medium