.NET Framework Denial of Service Vulnerability

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows:

  - A denial of service (DoS) vulnerability. (CVE-2023-21722)

  - A remote code execution vulnerability. (CVE-2023-21808)

The remote Windows host is missing security update 5022838. It is, therefore, affected by multiple vulnerabilities

  - Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVE-2023-21803)

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5022858. It is, therefore, affected by multiple vulnerabilities

  - Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVE-2023-21803)

  - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (CVE-2023-21684, CVE-2023-21801)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21685,     CVE-2023-21686, CVE-2023-21799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
171598	Security Updates for Microsoft .NET Framework (February 2023)	Nessus	Windows : Microsoft Bulletins	high
171448	KB5022838: Windows 10 Version 1607 and Windows Server 2016 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical
171447	KB5022858: Windows 10 LTS 1507 Security Update (February 2023)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2023-21722

medium

Tenable Plugins

high

critical

critical