.NET and Visual Studio Elevation of Privilege Vulnerability

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2037 advisory.

  - dotnet: .NET Core single-file application privilege escalation (CVE-2021-31204)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2036 advisory.

  - dotnet: .NET Core single-file application privilege escalation (CVE-2021-31204)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2036 advisory.

    [5.0.203-1.0.1]
    - Add support for new Oracle release

    [5.0.203-1]
    - Update to .NET SDK 5.0.203 and Runtime 5.0.6
    - Resolves: RHBZ#1954328

    [5.0.202-1]
    - Update to .NET SDK 5.0.202 and Runtime 5.0.5
    - Resolves: RHBZ#1947662

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2037 advisory.

    [3.1.115-1.0.1]
    - Update patch to support 8.3 (alexander.burmashev@oracle.com)
    - support OL release scheme (alexander.burmashev@oracle.com)

    [3.1.115-1]
    - Update to .NET SDK 3.1.115 and Runtime 3.1.15
    - Resolves: RHBZ#1954333

    [3.1.114-2]
    - Rebuild to tag into the correct location
    - Resolves: RHBZ#1947455

    [3.1.114-1]
    - Update to .NET Core SDK 3.1.114 and Runtime 3.1.14
    - Resolves: RHBZ#1947455

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2036 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 5.0.203 and .NET Runtime 5.0.6.

    Security Fix(es):

    * dotnet: .NET Core single-file application privilege escalation (CVE-2021-31204)

    In order for the update to be complete, self-contained applications deployed using previous versions need     to be recompiled and redeployed.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2037 advisory.

    .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several     new APIs, and it includes a CLR implementation.

    New versions of .NET Core that address a security vulnerability are now available. The updated versions     are .NET Core SDK 3.1.115 and .NET Core Runtime 3.1.15.

    Security Fix(es):

    * dotnet: .NET Core single-file application privilege escalation (CVE-2021-31204)

    In order for the update to be complete, self-contained applications deployed using previous versions need     to be recompiled and redeployed.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft .NET Core installation on the remote host is version 3.1.x prior to 3.1.15 or 5.x prior to 5.0.6. It is, therefore, affected by a privilege elevation vulnerability. An authenticated, local attacker can exploit this to elevate their privileges.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1546 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 5.0.203 and .NET Runtime 5.0.6.

    Security Fix(es):

    * dotnet: .NET Core single-file application privilege escalation (CVE-2021-31204)

    In order for the update to be complete, self-contained applications deployed using previous versions need     to be recompiled and redeployed.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1547 advisory.

    .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several     new APIs, and it includes a CLR implementation.

    New versions of .NET Core that address a security vulnerability are now available. The updated versions     are .NET Core SDK 3.1.115 and .NET Core Runtime 3.1.15.

    Security Fix(es):

    * dotnet: .NET Core single-file application privilege escalation (CVE-2021-31204)

    In order for the update to be complete, self-contained applications deployed using previous versions need     to be recompiled and redeployed.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by the multiple vulnerabilities, including the following:

  - A remote code execution vulnerability exists in Visual Studio. An unauthenticated, remote attacker can    exploit this to bypass authentication and execute arbitrary commands (CVE-2021-27068). 

  - A privilege escalation vulnerability exists in Visual Studio. An authenticated, local attacker can   exploit this to escalate their privileges of an affected system (CVE-2021-31204)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
150065	CentOS 8 : dotnet3.1 (CESA-2021:2037)	Nessus	CentOS Local Security Checks	high
150064	CentOS 8 : dotnet5.0 (CESA-2021:2036)	Nessus	CentOS Local Security Checks	high
150063	Oracle Linux 8 : dotnet5.0 (ELSA-2021-2036)	Nessus	Oracle Linux Local Security Checks	high
150060	Oracle Linux 8 : dotnet3.1 (ELSA-2021-2037)	Nessus	Oracle Linux Local Security Checks	high
149723	RHEL 8 : dotnet5.0 (RHSA-2021:2036)	Nessus	Red Hat Local Security Checks	high
149722	RHEL 8 : dotnet3.1 (RHSA-2021:2037)	Nessus	Red Hat Local Security Checks	high
149472	Security Update for .NET Core (May 2021) (macOS)	Nessus	MacOS X Local Security Checks	high
149443	RHEL 7 : .NET 5.0 on Red Hat Enterprise Linux (RHSA-2021:1546)	Nessus	Red Hat Local Security Checks	high
149442	RHEL 7 : .NET Core 3.1 on Red Hat Enterprise Linux (RHSA-2021:1547)	Nessus	Red Hat Local Security Checks	high
149436	Security Updates for Microsoft Visual Studio Products (May 2021)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2021-31204

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high