.NET Core and Visual Studio Information Disclosure Vulnerability

An update of the dotnet package has been released.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0062 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2021-26423:
    .NET Core and Visual Studio Denial of Service Vulnerability

    CVE-2021-34485:
    .NET Core and Visual Studio Information Disclosure Vulnerability

    CVE-2021-34532:
    ASP.NET Core and Visual Studio Information Disclosure Vulnerability

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:3145 advisory.

  - .NET Core and Visual Studio Information Disclosure Vulnerability (CVE-2021-34485)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:3142 advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2021-26423)

  - .NET Core and Visual Studio Information Disclosure Vulnerability (CVE-2021-34485)

  - ASP.NET Core and Visual Studio Information Disclosure Vulnerability (CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:3148 advisory.

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2021-26423)

  - .NET Core and Visual Studio Information Disclosure Vulnerability (CVE-2021-34485)

  - ASP.NET Core and Visual Studio Information Disclosure Vulnerability (CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3143 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 3.1.118 and .NET Runtime 3.1.18.

    Security Fix(es):

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3148 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 5.0.206 and .NET Runtime 5.0.9.

    Security Fix(es):

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3142 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 3.1.118 and .NET Runtime 3.1.18.

    Security Fix(es):

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3147 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address security vulnerabilities are now available. The updated versions are     .NET SDK 5.0.206 and .NET Runtime 5.0.9.

    Security Fix(es):

    * dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    * dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3142 advisory.

  - dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

  - dotnet: Dump file created world-readable (CVE-2021-34485)

  - dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3144 advisory.

    .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several     new APIs, and it includes a CLR implementation.

    New versions of .NET Core that address a security vulnerability are now available. The updated versions     are .NET Core SDK  2.1.525 and .NET Core Runtime 2.1.29.

    Security Fix(es):

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    Default inclusions for applications built with .NET Core have been updated to reference the newest     versions and their security fixes.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3145 advisory.

    .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several     new APIs, and it includes a CLR implementation.

    New versions of .NET Core that address a security vulnerability are now available. The updated versions     are .NET Core SDK  2.1.525 and .NET Core Runtime 2.1.29.

    Security Fix(es):

    * dotnet: Dump file created world-readable (CVE-2021-34485)

    Default inclusions for applications built with .NET Core have been updated to reference the newest     versions and their security fixes.

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:3148 advisory.

  - dotnet: ASP.NET Core WebSocket frame processing DoS (CVE-2021-26423)

  - dotnet: Dump file created world-readable (CVE-2021-34485)

  - dotnet: ASP.NET Core JWT token logging (CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:3145 advisory.

  - dotnet: Dump file created world-readable (CVE-2021-34485)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3142 advisory.

    [3.1.118-1.0.1]
    - Update patch to support 8.3 (alexander.burmashev@oracle.com)
    - support OL release scheme (alexander.burmashev@oracle.com)

    [3.1.118-1]
    - Update to .NET SDK 3.1.118 and Runtime 3.1.18
    - Resolves: RHBZ#1990189

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3148 advisory.

    [5.0.206-1.0.1]
    - Add support for new Oracle release

    [5.0.206-1]
    - Update to .NET SDK 5.0.206 and Runtime 5.0.9
    - Resolves: RHBZ#1990965

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft ASP.NET Core installation on the remote host is version 2.1.x prior to 2.1.29, 3.1.x prior to 3.1.18, or 5.x prior to 5.0.9. It is, therefore, affected by multiple vulnerabilities:

  - A denial of service (DoS) vulnerability. An attacker can exploit this issue to cause the affected     component to deny system or application services. (CVE-2021-26423)

  - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive     information. (CVE-2021-34485, CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-3145 advisory.

    [2.1.525-1]
    - Update to .NET SDK 2.1.525 and Runtime 2.1.29
    - Resolves: RHBZ#1988581

    [2.1.524-1]
    - Update to .NET SDK 2.1.524 and Runtime 2.1.28
    - Resolves: RHBZ#1953766

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft .NET Core installation on the remote host is version 2.1.x prior to 2.1.29, 3.1.x prior to 3.1.18, or 5.x prior to 5.0.9.  It is, therefore affected by multiple vulnerabilities, as follows:

  - An information disclosure vulnerability exists when dumps created by the tool to collect crash dumps and     dumps on demand are created with global read permissions on Linux and macOS. (CVE-2021-34485)

  - A denial of service vulnerability exists as server applications providing WebSocket endpoints can be     tricked into endlessly looping while trying to read a single WebSocket frame. (CVE-2021-26423)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing a security update. They are, therefore, affected by multiple vulnerabilities:

  - A denial of service (DoS) vulnerability. An attacker can exploit this issue to cause the affected component to deny     system or application services. (CVE-2021-26423)

  - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive     information. (CVE-2021-34485, CVE-2021-34532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
237067	Photon OS 4.0: Dotnet PHSA-2025-4.0-0804	Nessus	PhotonOS Local Security Checks	high
236416	Alibaba Cloud Linux 3 : 0062: .NET Core 3.1 (ALINUX3-SA-2021:0062)	Nessus	Alibaba Cloud Linux Local Security Checks	medium
157821	Rocky Linux 8 : .NET Core 2.1 (RLSA-2021:3145)	Nessus	Rocky Linux Local Security Checks	medium
157781	Rocky Linux 8 : .NET Core 3.1 (RLSA-2021:3142)	Nessus	Rocky Linux Local Security Checks	medium
157752	Rocky Linux 8 : .NET 5.0 (RLSA-2021:3148)	Nessus	Rocky Linux Local Security Checks	medium
152605	RHEL 7 : .NET Core 3.1 on RHEL 7 (RHSA-2021:3143)	Nessus	Red Hat Local Security Checks	medium
152604	RHEL 8 : .NET 5.0 (RHSA-2021:3148)	Nessus	Red Hat Local Security Checks	medium
152595	RHEL 8 : .NET Core 3.1 (RHSA-2021:3142)	Nessus	Red Hat Local Security Checks	medium
152592	RHEL 7 : .NET 5.0 on RHEL 7 (RHSA-2021:3147)	Nessus	Red Hat Local Security Checks	medium
152591	CentOS 8 : .NET Core 3.1 (CESA-2021:3142)	Nessus	CentOS Local Security Checks	medium
152590	RHEL 7 : .NET Core 2.1 on Red Hat Enterprise Linux (RHSA-2021:3144)	Nessus	Red Hat Local Security Checks	medium
152584	RHEL 8 : .NET Core 2.1 (RHSA-2021:3145)	Nessus	Red Hat Local Security Checks	medium
152582	CentOS 8 : .NET 5.0 (CESA-2021:3148)	Nessus	CentOS Local Security Checks	medium
152573	CentOS 8 : .NET Core 2.1 (CESA-2021:3145)	Nessus	CentOS Local Security Checks	medium
152549	Oracle Linux 8 : .NET / Core / 3.1 (ELSA-2021-3142)	Nessus	Oracle Linux Local Security Checks	medium
152548	Oracle Linux 8 : .NET / 5.0 (ELSA-2021-3148)	Nessus	Oracle Linux Local Security Checks	medium
152528	Security Update for Microsoft ASP.NET Core (August 2021)	Nessus	Windows	medium
152512	Oracle Linux 8 : .NET / Core / 2.1 (ELSA-2021-3145)	Nessus	Oracle Linux Local Security Checks	medium
152489	Security Update for .NET Core (August 2021) (macOS)	Nessus	MacOS X Local Security Checks	medium
152423	Security Updates for Microsoft Visual Studio Products (August 2021)	Nessus	Windows : Microsoft Bulletins	medium

Detections

Analytics

CVE-2021-34485

medium

Tenable Plugins

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium