Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature Bypass Vulnerability."

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0
    and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way
    certificates are validated, aka ".NET Security Feature Bypass Vulnerability." (CVE-2018-0786)

The .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities:

  - A Denial of Service vulnerability exists when .NET, and     .NET core, improperly process XML documents. An attacker     who successfully exploited this vulnerability could     cause a denial of service against a .NET application. A     remote unauthenticated attacker could exploit this     vulnerability by issuing specially crafted requests to a     .NET(or .NET core) application. (CVE-2018-0764)

  - A security feature bypass vulnerability exists when     Microsoft .NET Framework (and .NET Core) components do     not completely validate certificates. An attacker could     present a certificate that is marked invalid for a     specific use, but the component uses it for that     purpose. This action disregards the Enhanced Key Usage     taggings. (CVE-2018-0786)

The remote Windows host has an installation of .NET Core with a version less than 2.0.5. Therefore, the host is affected by multiple vulnerabilities :

  - A security feature bypass in X509 Certificate Validation     allows an attacker to present a certificate that is     marked as invalid for a specific use, but a component     uses it for that purpose. (CVE-2018-0786)

  - A denial of service vulnerability exists due to improper      processing of XML documents. An attacker who      successfully exploited this vulnerability could cause      a denial of service against a .NET application. A      remote unauthenticated attacker could exploit this      vulnerability by issuing specially crafted requests      to a .NET Core application. (CVE-2018-0764)

The Microsoft .NET Core runtime installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - A security feature bypass in X509 Certificate Validation     allows an attacker to present a certificate that is     marked as invalid for a specific use, but a component     uses it for that purpose. (CVE-2018-0786)

  - A denial of service vulnerability exists due to improper      processing of XML documents. An attacker who      successfully exploited this vulnerability could cause      a denial of service against a .NET application. A      remote unauthenticated attacker could exploit this      vulnerability by issuing specially crafted requests      to a .NET Core application. (CVE-2018-0764)

ID	Name	Product	Family	Type	Severity
422472	SCA: security update for Microsoft.NETCore.UniversalWindowsPlatform, System.Private.ServiceModel, System.ServiceModel.Duplex, System.ServiceModel.Http, System.ServiceModel.NetTcp, System.ServiceModel.Primitives, System.ServiceModel.Security (GHSA-jc8g-xhw5-6x46)	Tenable Cloud Security	SCA Checks	Local	high
422472	SCA: security update for Microsoft.NETCore.UniversalWindowsPlatform, System.Private.ServiceModel, System.ServiceModel.Duplex, System.ServiceModel.Http, System.ServiceModel.NetTcp, System.ServiceModel.Primitives, System.ServiceModel.Security (GHSA-jc8g-xhw5-6x46)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
105731	Security and Quality Rollup for .NET Framework (January 2018)	Nessus	Windows : Microsoft Bulletins	Local	high
105730	Security Update for .NET Core (January 2018)	Nessus	Windows	Local	high
105729	Security Update for .NET Core (January 2018) (macOS)	Nessus	MacOS X Local Security Checks	Local	high

Detections

Analytics

CVE-2018-0786

high

Tenable Plugins

high

high

high

high

high