.NET Core Remote Code Execution Vulnerability

oracle CPUJul2024: MySQL Cluster 8.0.38

oracle CPUJul2024: MySQL Cluster 8.4.1

oracle CPUJul2024: MySQL Cluster 8.3.1

oracle CPUJul2024: MySQL Cluster 7.6.31

oracle CPUJul2024: MySQL Cluster 7.5.35

oracle CPUJul2024: MySQL Connectors

oracle CPUJul2024: MySQL Cluster 8.1.1

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-48ca39b6ad advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2021-1721)

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26701. (CVE-2021-24112)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-c3d7fc8949 advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2021-1721)

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26701. (CVE-2021-24112)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-56e894d5ca advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2021-1721)

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26701. (CVE-2021-24112)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-b881ee9839 advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2021-1721)

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26701. (CVE-2021-24112)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft .NET Core runtime installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities:

  - A denial of service vulnerability exists in .NET Core when creating HTTPS web requests during X509     certificate chain building. An unauthenticated, remote attacker can exploit this to cause the application     to stop responding. (CVE-2021-1721)

  - A remote code execution vulnerability exists in .NET Core when parsing certain types of graphics files. An     unauthenticated, remote attacker can exploit this to execute arbitrary code. This vulnerability only     exists on systems running on macOS or Linux. (CVE-2021-24112)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
146856	Fedora 32 : dotnet3.1 (2021-48ca39b6ad)	Nessus	Fedora Local Security Checks	high
146854	Fedora 33 : dotnet3.1 (2021-c3d7fc8949)	Nessus	Fedora Local Security Checks	high
146828	Fedora 32 : dotnet5.0 (2021-56e894d5ca)	Nessus	Fedora Local Security Checks	high
146691	Fedora 33 : dotnet5.0 (2021-b881ee9839)	Nessus	Fedora Local Security Checks	high
146347	Security Update for .NET Core (February 2021) (macOS)	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2021-24112

high

Tenable Plugins

Coming Soon

high

high

high

high

high