The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:0079 advisory.

  - .NET Denial of Service Vulnerability (CVE-2023-21538)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:0077 advisory.

  - .NET Denial of Service Vulnerability (CVE-2023-21538)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-242 advisory.

  - .NET Denial of Service Vulnerability (CVE-2023-21538)

  - .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2023-24895)

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-24936)

  - .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability (CVE-2023-29331)

  - NuGet Client Remote Code Execution Vulnerability (CVE-2023-29337)

  - .NET and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-32032, CVE-2023-33135)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4d5f7e5cb0 advisory.

  - .NET Denial of Service Vulnerability. (CVE-2023-21538)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-f9368f7fea advisory.

  - .NET Denial of Service Vulnerability. (CVE-2023-21538)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:0077 advisory.

  - .NET Denial of Service Vulnerability. (CVE-2023-21538)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:0079 advisory.

  - .NET Denial of Service Vulnerability. (CVE-2023-21538)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-0077 advisory.

  - .NET Denial of Service Vulnerability. (CVE-2023-21538)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-0079 advisory.

  - .NET Denial of Service Vulnerability. (CVE-2023-21538)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A denial of service vulnerability exists in .NET 6.0 where a malicious client could cause a stack overflow which may result in a denial of service attack when an attacker sends an invalid request to an exposed endpoint.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0078 advisory.

  - dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process     (CVE-2023-21538)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0077 advisory.

  - dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process     (CVE-2023-21538)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0079 advisory.

  - dotnet: Parsing an empty HTTP response as a JSON.NET JObject causes a stack overflow and crashes a process     (CVE-2023-21538)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5798-1 advisory.

  - .NET Denial of Service Vulnerability. (CVE-2023-21538)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
184947	Rocky Linux 8 : .NET 6.0 (RLSA-2023:0079)	Nessus	Rocky Linux Local Security Checks	high
184745	Rocky Linux 9 : .NET 6.0 (RLSA-2023:0077)	Nessus	Rocky Linux Local Security Checks	high
178608	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-242)	Nessus	Amazon Linux Local Security Checks	high
170262	Fedora 36 : dotnet6.0 (2023-4d5f7e5cb0)	Nessus	Fedora Local Security Checks	high
170261	Fedora 37 : dotnet6.0 (2023-f9368f7fea)	Nessus	Fedora Local Security Checks	high
170030	AlmaLinux 9 : .NET 6.0 (ALSA-2023:0077)	Nessus	Alma Linux Local Security Checks	high
169992	AlmaLinux 8 : .NET 6.0 (ALSA-2023:0079)	Nessus	Alma Linux Local Security Checks	high
169982	Oracle Linux 9 : .NET / 6.0 (ELSA-2023-0077)	Nessus	Oracle Linux Local Security Checks	high
169977	Oracle Linux 8 : .NET / 6.0 (ELSA-2023-0079)	Nessus	Oracle Linux Local Security Checks	high
169968	Security Updates for Microsoft Visual Studio Products (Jan 2023)	Nessus	Windows : Microsoft Bulletins	high
169921	RHEL 7 : .NET 6.0 (RHSA-2023:0078)	Nessus	Red Hat Local Security Checks	high
169919	RHEL 9 : .NET 6.0 (RHSA-2023:0077)	Nessus	Red Hat Local Security Checks	high
169918	RHEL 8 : .NET 6.0 (RHSA-2023:0079)	Nessus	Red Hat Local Security Checks	high
169807	Ubuntu 22.04 LTS : .NET 6 vulnerability (USN-5798-1)	Nessus	Ubuntu Local Security Checks	high
169775	Security Updates for Microsoft .NET Core (January 2023)	Nessus	Windows	high

Detections

Analytics

CVE-2023-21538

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high