.NET DLL Hijacking Remote Code Execution Vulnerability

An update of the dotnet package has been released.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - .NET DLL Hijacking Remote Code Execution Vulnerability (CVE-2023-28260)

A remote code execution vulnerability exists in .NET core 6.0 < 6.0.16 and .NET Core 7.0 < 7.0.5. This vulnerability exists due to how .NET running on Windows where a runtime DLL can be loaded from an unexpected location, resulting in remote code execution.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - .NET DLL Hijacking Remote Code Execution Vulnerability. (CVE-2023-28260)

  - Visual Studio Elevation of Privilege Vulnerability. (CVE-2023-28262)

  - Visual Studio Information Disclosure Vulnerability. (CVE-2023-28263)

  - Visual Studio Remote Code Execution Vulnerability. (CVE-2023-28296)

  - Visual Studio Spoofing Vulnerability. (CVE-2023-28299)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6006-1 advisory.

    It was discovered that .NET did not properly manage dll files. An attacker could potentially use this     issue to execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
237067	Photon OS 4.0: Dotnet PHSA-2025-4.0-0804	Nessus	PhotonOS Local Security Checks	high
426276	Alpine: dotnet6-build: security update to 6.0.116-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
426276	Alpine: dotnet6-build: security update to 6.0.116-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
426132	Alpine: dotnet6-runtime: security update to 6.0.16-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
426132	Alpine: dotnet6-runtime: security update to 6.0.16-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
234310	Photon OS 5.0: Dotnet PHSA-2025-5.0-0499	Nessus	PhotonOS Local Security Checks	critical
419694	SCA: security update for Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-x86 (GHSA-w4m3-43gp-x8hx)	Tenable Cloud Security	SCA Checks	high
419694	SCA: security update for Microsoft.NetCore.App.Runtime.win-arm, Microsoft.NetCore.App.Runtime.win-arm64, Microsoft.NetCore.App.Runtime.win-x64, Microsoft.NetCore.App.Runtime.win-x86 (GHSA-w4m3-43gp-x8hx)	Tenable Self-Hosted Container Security	SCA Checks	high
404158	Alpine: dotnet7-runtime: security update to 7.0.5-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
404158	Alpine: dotnet7-runtime: security update to 7.0.5-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
404145	Alpine: dotnet7-build: security update to 7.0.105-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
404145	Alpine: dotnet7-build: security update to 7.0.105-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
174219	Security Updates for Microsoft .NET core (April 2023)	Nessus	Windows	high
174163	Security Updates for Microsoft Visual Studio Products (April 2023)	Nessus	Windows : Microsoft Bulletins	high
174154	Ubuntu 22.04 LTS : .NET vulnerability (USN-6006-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2023-28260

high

Tenable Plugins

high

high

high

high

high

critical

high

high

high

high

high

high

high

high

high