A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle
    objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the
    context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'. (CVE-2020-0603)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0130 advisory.

  - dotnet: Denial of service via backpressure issue (CVE-2020-0602)

  - dotnet: Memory Corruption in SignalR (CVE-2020-0603)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0134 advisory.

    .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several     new APIs, and it includes a CLR implementation.

    New versions of .NET Core that address security vulnerabilities are now available. The updated versions     are .NET Core SDK 3.0.102, .NET Core Runtime 3.0.2, .NET Core SDK 3.1.101 and .NET Core Runtime 3.1.1.

    Security Fixes:

    * dotnet: Memory Corruption in SignalR (CVE-2020-0603)

    * dotnet: SignalR Denial of Service via backpressure issue (CVE-2020-0602)

    Users must rebuild their applications to pick up the fixes.

    Default inclusions for applications built with .NET Core have been updated to reference the newest     versions and their security fixes.

    For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other     related information, refer to the CVE pages listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0130 advisory.

    [102-2.0.1.el8_1]
    - support OL release scheme

    [3.0.102-2]
    - Fix prebuilts leaking into the final build
    - Fix regressions in binary hardering
    - Resolves: RHBZ#1788171

    [3.0.102-1]
    - Update to .NET Core Runtime 3.0.2 and SDK 3.0.102
    - Resolves: RHBZ#1788171

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft ASP.NET Core installation on the remote host is version 2.1.x < 2.1.15, 3.0.x < 3.0.2, or 3.1.x < 3.1.1.
It is, therefore, affected by multiple vulnerabilities:

  - A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who     successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application.
    The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could     exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. (CVE-2020-0602)

  - A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in     memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the     current user. If the current user is logged on with administrative user rights, an attacker could take control of     the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts     with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less     impacted than users who operate with administrative user rights. (CVE-2020-0603)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0130 advisory.

    .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several     new APIs, and it includes a CLR implementation.

    New versions of .NET Core that address security vulnerabilities are now available. The updated versions     are .NET Core SDK 3.0.102 and .NET Core Runtime 3.0.2.

    Security Fixes:

    * dotnet: Memory Corruption in SignalR (CVE-2020-0603)

    * dotnet: SignalR Denial of Service via backpressure issue (CVE-2020-0602)

    Default inclusions for applications built with .NET Core have been updated to reference the newest     versions and their security fixes.

    For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other     related information, refer to the CVE pages listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft .NET Core SDK installation on the remote host is version 2.1.x < 2.1.511 or 2.1.608, 3.0.x < 3.0.102, or 3.1.x < 3.1.101. It is, therefore, affected by multiple vulnerabilities:

  - A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who     successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application.
    The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could     exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. (CVE-2020-0602)

  - A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in     memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the     current user. If the current user is logged on with administrative user rights, an attacker could take control of     the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts     with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less     impacted than users who operate with administrative user rights. (CVE-2020-0603)

  - A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of     a file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the     current user. If the current user is logged on with administrative user rights, an attacker could take control of     the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts     with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less     impacted than users who operate with administrative user rights. (CVE-2020-0605, CVE-2020-0606)

ID	Name	Product	Family	Severity
411201	SCA: security update for microsoft.aspnetcore.all, microsoft.aspnetcore.app, microsoft.aspnetcore.app.runtime.linux-arm, microsoft.aspnetcore.app.runtime.linux-arm64, microsoft.aspnetcore.app.runtime.linux-musl-arm64, microsoft.aspnetcore.app.runtime.linux-musl-x64, microsoft.aspnetcore.app.runtime.linux-x64, microsoft.aspnetcore.app.runtime.osx-x64, microsoft.aspnetcore.app.runtime.win-arm, microsoft.aspnetcore.app.runtime.win-x64, microsoft.aspnetcore.app.runtime.win-x86, microsoft.aspnetcore.http.connections (GHSA-655q-9gvg-q4cm)	Tenable Cloud Security	SCA Checks	high
411201	SCA: security update for microsoft.aspnetcore.all, microsoft.aspnetcore.app, microsoft.aspnetcore.app.runtime.linux-arm, microsoft.aspnetcore.app.runtime.linux-arm64, microsoft.aspnetcore.app.runtime.linux-musl-arm64, microsoft.aspnetcore.app.runtime.linux-musl-x64, microsoft.aspnetcore.app.runtime.linux-x64, microsoft.aspnetcore.app.runtime.osx-x64, microsoft.aspnetcore.app.runtime.win-arm, microsoft.aspnetcore.app.runtime.win-x64, microsoft.aspnetcore.app.runtime.win-x86, microsoft.aspnetcore.http.connections (GHSA-655q-9gvg-q4cm)	Tenable Self-Hosted Container Security	SCA Checks	high
145938	CentOS 8 : .NET Core on Red Hat Enterprise Linux (CESA-2020:0130)	Nessus	CentOS Local Security Checks	high
133124	RHEL 7 : .NET Core on Red Hat Enterprise Linux (RHSA-2020:0134)	Nessus	Red Hat Local Security Checks	high
133123	Oracle Linux 8 : .NET / Core / on / Red / Hat / Enterprise / Linux (ELSA-2020-0130)	Nessus	Oracle Linux Local Security Checks	high
133049	Security Update for Microsoft ASP.NET Core (January 2020)	Nessus	Windows	high
133028	RHEL 8 : .NET Core on Red Hat Enterprise Linux (RHSA-2020:0130)	Nessus	Red Hat Local Security Checks	high
132994	Security Update for .NET Core SDK (January 2020)	Nessus	Windows	high

Detections

Analytics

CVE-2020-0603

high

Tenable Plugins

high

high

high

high

high

high

high

high