The Microsoft .NET Framework installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :

  - A denial of service vulnerability exists when .NET     Framework improperly handles objects in heap memory. An     attacker who successfully exploited this vulnerability     could cause a denial of service against a .NET     application.  (CVE-2019-0864)

  - A denial of service vulnerability exists when .NET     Framework and .NET Core improperly process RegEx     strings. An attacker who successfully exploited this     vulnerability could cause a denial of service against a     .NET application. A remote unauthenticated attacker     could exploit this vulnerability by issuing specially     crafted requests to a .NET Framework (or .NET core)     application. The update addresses the vulnerability by     correcting how .NET Framework and .NET Core applications     handle RegEx string processing. (CVE-2019-0820)

  - A denial of service vulnerability exists when .NET     Framework or .NET Core improperly handle web requests.
    An attacker who successfully exploited this     vulnerability could cause a denial of service against a     .NET Framework or .NET Core web application. The     vulnerability can be exploited remotely, without     authentication. A remote unauthenticated attacker could     exploit this vulnerability by issuing specially crafted     requests to the .NET Framework or .NET Core application.
    The update addresses the vulnerability by correcting how     .NET Framework or .NET Core web applications handles web     requests. (CVE-2019-0980, CVE-2019-0981)

Detections

Analytics

Security Updates for Microsoft .NET Framework (May 2019)

high Nessus Plugin ID 125074

Version 1.6

Version 1.5

Version 1.6 May 22, 2024, 9:37 AM CVSSv2 score source (changed from "CVE-2019-0820" to "CVE-2019-0981") Exploit attributes ("Exploit available" set to "False") Plugin Feed: 202405220937
Version 1.5 Dec 6, 2022, 6:53 AM Reference Plugin Feed: 202212060653