.NET Core and Visual Studio Denial of Service Vulnerability

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:3142 advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2021-26423)

  - .NET Core and Visual Studio Information Disclosure Vulnerability (CVE-2021-34485)

  - ASP.NET Core and Visual Studio Information Disclosure Vulnerability (CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:3148 advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2021-26423)

  - .NET Core and Visual Studio Information Disclosure Vulnerability (CVE-2021-34485)

  - ASP.NET Core and Visual Studio Information Disclosure Vulnerability (CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3143 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 3.1.118 and .NET Runtime 3.1.18.

    Security Fix(es):

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3148 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 5.0.206 and .NET Runtime 5.0.9.

    Security Fix(es):

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3142 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 3.1.118 and .NET Runtime 3.1.18.

    Security Fix(es):

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3147 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 5.0.206 and .NET Runtime 5.0.9.

    Security Fix(es):

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3142 advisory.

  - dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

  - dotnet: Dump file created world-readable (CVE-2021-34485)

  - dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3148 advisory.

  - dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

  - dotnet: Dump file created world-readable (CVE-2021-34485)

  - dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3142 advisory.

    [3.1.118-1.0.1]
    - Update patch to support 8.3 (alexander.burmashev@oracle.com)
    - support OL release scheme (alexander.burmashev@oracle.com)

    [3.1.118-1]
    - Update to .NET SDK 3.1.118 and Runtime 3.1.18
    - Resolves: RHBZ#1990189

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3148 advisory.

    [5.0.206-1.0.1]
    - Add support for new Oracle release

    [5.0.206-1]
    - Update to .NET SDK 5.0.206 and Runtime 5.0.9
    - Resolves: RHBZ#1990965

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft ASP.NET Core installation on the remote host is version 2.1.x prior to 2.1.29, 3.1.x prior to 3.1.18, or 5.x prior to 5.0.9. It is, therefore, affected by multiple vulnerabilities:

  - A denial of service (DoS) vulnerability. An attacker can exploit this issue to cause the affected     component to deny system or application services. (CVE-2021-26423)

  - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive     information. (CVE-2021-34485, CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft .NET Core installation on the remote host is version 2.1.x prior to 2.1.29, 3.1.x prior to 3.1.18, or 5.x prior to 5.0.9.  It is, therefore affected by multiple vulnerabilities, as follows:

  - An information disclosure vulnerability exists when dumps created by the tool to collect crash dumps and     dumps on demand are created with global read permissions on Linux and macOS. (CVE-2021-34485)

  - A denial of service vulnerability exists as server applications providing WebSocket endpoints can be     tricked into endlessly looping while trying to read a single WebSocket frame. (CVE-2021-26423)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft .NET Core installation on the remote host is version 2.1.x prior to 2.1.29, 3.1.x prior to 3.1.18, or 5.x prior to 5.0.9.  It is, therefore affected by a denial of service (DoS) vulnerability, as server applications providing WebSocket endpoints can be tricked into endlessly looping while trying to read a single WebSocket frame.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio 2019 runtime installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities including the following:

  - A denial of service (DoS) vulnerability exists in Microsoft Visual Studio 2019. An unauthenticated,     remote attacker can exploit this issue to cause the application to stop responding. (CVE-2021-26423)

  - An information disclosure vulnerability exists in Microsoft Visual Studio 2019. An authenticated,     local attacker can exploit this to disclose potentially sensitive information. (CVE-2021-34532)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version

The Microsoft Visual Studio Products are missing a security update. They are, therefore, affected by multiple vulnerabilities:

  - A denial of service (DoS) vulnerability. An attacker can exploit this issue to cause the affected component to deny     system or application services. (CVE-2021-26423)

  - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive     information. (CVE-2021-34485, CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
157781	Rocky Linux 8 : .NET Core 3.1 (RLSA-2021:3142)	Nessus	Rocky Linux Local Security Checks	medium
157752	Rocky Linux 8 : .NET 5.0 (RLSA-2021:3148)	Nessus	Rocky Linux Local Security Checks	medium
152605	RHEL 7 : .NET Core 3.1 on RHEL 7 (RHSA-2021:3143)	Nessus	Red Hat Local Security Checks	medium
152604	RHEL 8 : .NET 5.0 (RHSA-2021:3148)	Nessus	Red Hat Local Security Checks	medium
152595	RHEL 8 : .NET Core 3.1 (RHSA-2021:3142)	Nessus	Red Hat Local Security Checks	medium
152592	RHEL 7 : .NET 5.0 on RHEL 7 (RHSA-2021:3147)	Nessus	Red Hat Local Security Checks	medium
152591	CentOS 8 : .NET Core 3.1 (CESA-2021:3142)	Nessus	CentOS Local Security Checks	medium
152582	CentOS 8 : .NET 5.0 (CESA-2021:3148)	Nessus	CentOS Local Security Checks	medium
152549	Oracle Linux 8 : .NET / Core / 3.1 (ELSA-2021-3142)	Nessus	Oracle Linux Local Security Checks	medium
152548	Oracle Linux 8 : .NET / 5.0 (ELSA-2021-3148)	Nessus	Oracle Linux Local Security Checks	medium
152528	Security Update for Microsoft ASP.NET Core (August 2021)	Nessus	Windows	medium
152489	Security Update for .NET Core (August 2021) (macOS)	Nessus	MacOS X Local Security Checks	medium
152488	Security Update for .NET Core (August 2021)	Nessus	Windows	high
152482	Security Update for Visual Studio 2019 (August 2021) (macOS)	Nessus	MacOS X Local Security Checks	medium
152423	Security Updates for Microsoft Visual Studio Products (August 2021)	Nessus	Windows : Microsoft Bulletins	medium

Detections

Analytics

CVE-2021-26423

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium