A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0130 advisory.

  - dotnet: Denial of service via backpressure issue (CVE-2020-0602)

  - dotnet: Memory Corruption in SignalR (CVE-2020-0603)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0134 advisory.

  - dotnet: Denial of service via backpressure issue (CVE-2020-0602)

  - dotnet: Memory Corruption in SignalR (CVE-2020-0603)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

From Red Hat Security Advisory 2020:0130 :

An update for dotnet3.0 is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.

New versions of .NET Core that address security vulnerabilities are now available. The updated versions are .NET Core SDK 3.0.102 and .NET Core Runtime 3.0.2.

Security Fixes :

* dotnet: Memory Corruption in SignalR (CVE-2020-0603)

* dotnet: SignalR Denial of Service via backpressure issue (CVE-2020-0602)

Default inclusions for applications built with .NET Core have been updated to reference the newest versions and their security fixes.

For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the References section.

The Microsoft ASP.NET Core installation on the remote host is version 2.1.x < 2.1.15, 3.0.x < 3.0.2, or 3.1.x < 3.1.1.
It is, therefore, affected by multiple vulnerabilities:

  - A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who     successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application.
    The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could     exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. (CVE-2020-0602)

  - A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in     memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the     current user. If the current user is logged on with administrative user rights, an attacker could take control of     the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts     with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less     impacted than users who operate with administrative user rights. (CVE-2020-0603)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0130 advisory.

  - dotnet: Denial of service via backpressure issue (CVE-2020-0602)

  - dotnet: Memory Corruption in SignalR (CVE-2020-0603)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft .NET Core SDK installation on the remote host is version 2.1.x < 2.1.511 or 2.1.608, 3.0.x < 3.0.102, or 3.1.x < 3.1.101. It is, therefore, affected by multiple vulnerabilities:

  - A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who     successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application.
    The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could     exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. (CVE-2020-0602)

  - A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in     memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the     current user. If the current user is logged on with administrative user rights, an attacker could take control of     the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts     with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less     impacted than users who operate with administrative user rights. (CVE-2020-0603)

  - A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of     a file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the     current user. If the current user is logged on with administrative user rights, an attacker could take control of     the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts     with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less     impacted than users who operate with administrative user rights. (CVE-2020-0605, CVE-2020-0606)

ID	Name	Product	Family	Severity
145938	CentOS 8 : .NET Core on Red Hat Enterprise Linux (CESA-2020:0130)	Nessus	CentOS Local Security Checks	high
133124	RHEL 7 : .NET Core on Red Hat Enterprise Linux (RHSA-2020:0134)	Nessus	Red Hat Local Security Checks	high
133123	Oracle Linux 8 : .NET / Core / Enterprise / Hat / Linux / Red / on (ELSA-2020-0130)	Nessus	Oracle Linux Local Security Checks	high
133049	Security Update for Microsoft ASP.NET Core (January 2020)	Nessus	Windows	high
133028	RHEL 8 : .NET Core on Red Hat Enterprise Linux (RHSA-2020:0130)	Nessus	Red Hat Local Security Checks	high
132994	Security Update for .NET Core SDK (January 2020)	Nessus	Windows	high

Detections

Analytics

CVE-2020-0602

high

Tenable Plugins

high

high

high

high

high

high