.NET Core Remote Code Execution Vulnerability

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-265a3c7cb9 advisory.

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. (CVE-2021-26701)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-3da33cdc80 advisory.

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. (CVE-2021-26701)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-138728e59b advisory.

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. (CVE-2021-26701)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-1b22f31541 advisory.

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. (CVE-2021-26701)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft .NET Core installation on the remote host is version 2.1.x prior to 2.1.26, 3.1.x prior to 3.1.13, or 5.x prior to 5.0.4. It is, therefore, affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0793 advisory.

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. (CVE-2021-26701)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0790 advisory.

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. (CVE-2021-26701)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0788 advisory.

  - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. (CVE-2021-26701)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0790 advisory.

  - dotnet: System.Text.Encodings.Web Remote Code Execution (CVE-2021-26701)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0793 advisory.

  - dotnet: System.Text.Encodings.Web Remote Code Execution (CVE-2021-26701)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0787 advisory.

  - dotnet: System.Text.Encodings.Web Remote Code Execution (CVE-2021-26701)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0789 advisory.

  - dotnet: System.Text.Encodings.Web Remote Code Execution (CVE-2021-26701)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0794 advisory.

  - dotnet: System.Text.Encodings.Web Remote Code Execution (CVE-2021-26701)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0788 advisory.

  - dotnet: System.Text.Encodings.Web Remote Code Execution (CVE-2021-26701)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
148198	Fedora 32 : dotnet3.1 (2021-265a3c7cb9)	Nessus	Fedora Local Security Checks	high
148197	Fedora 33 : dotnet3.1 (2021-3da33cdc80)	Nessus	Fedora Local Security Checks	high
148174	Fedora 32 : dotnet5.0 (2021-138728e59b)	Nessus	Fedora Local Security Checks	high
147957	Fedora 33 : dotnet5.0 (2021-1b22f31541)	Nessus	Fedora Local Security Checks	high
147946	Security Update for .NET Core (March 2021)	Nessus	Windows	high
147655	Oracle Linux 8 : .NET / Core / on / OL / 8 (ELSA-2021-0793)	Nessus	Oracle Linux Local Security Checks	high
147646	Oracle Linux 8 : SUMM: / dotnet3.1 (ELSA-2021-0790)	Nessus	Oracle Linux Local Security Checks	high
147641	Oracle Linux 8 : SUMM: / dotnet (ELSA-2021-0788)	Nessus	Oracle Linux Local Security Checks	high
147365	RHEL 8 : dotnet3.1 (RHSA-2021:0790)	Nessus	Red Hat Local Security Checks	high
147236	RHEL 8 : .NET Core on RHEL 8 (RHSA-2021:0793)	Nessus	Red Hat Local Security Checks	high
147235	RHEL 7 : .NET Core 2.1 on Red Hat Enterprise Linux (RHSA-2021:0787)	Nessus	Red Hat Local Security Checks	high
147234	RHEL 7 : .NET Core 3.1 on Red Hat Enterprise Linux (RHSA-2021:0789)	Nessus	Red Hat Local Security Checks	high
147233	RHEL 7 : .NET 5.0 on Red Hat Enterprise Linux (RHSA-2021:0794)	Nessus	Red Hat Local Security Checks	high
147232	RHEL 8 : dotnet (RHSA-2021:0788)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2021-26701

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high