ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

An update of the dotnet package has been released.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0677 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-44487:
    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation     can reset many streams quickly, as exploited in the wild in August through October 2023.

    CVE-2023-36794:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-38180:
    .NET and Visual Studio Denial of Service Vulnerability

    CVE-2023-35390:
    .NET and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-33170:
    ASP.NET and Visual Studio Security Feature Bypass Vulnerability

    CVE-2023-33127:
    .NET and Visual Studio Elevation of Privilege Vulnerability

    CVE-2023-29337:
    NuGet Client Remote Code Execution Vulnerability

    CVE-2023-24895:
    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-24897:
    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-33135:
    .NET and Visual Studio Elevation of Privilege Vulnerability

    CVE-2023-33126:
    .NET and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36792:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36793:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36796:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36799:
    .NET Core and Visual Studio Denial of Service Vulnerability

    CVE-2023-35391:
    ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0680 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-36435:
    Microsoft QUIC Denial of Service Vulnerability

    CVE-2023-38171:
    Microsoft QUIC Denial of Service Vulnerability

    CVE-2023-44487:
    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation     can reset many streams quickly, as exploited in the wild in August through October 2023.

    CVE-2023-36792:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36793:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36794:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36796:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36799:
    .NET Core and Visual Studio Denial of Service Vulnerability

    CVE-2023-38180:
    .NET and Visual Studio Denial of Service Vulnerability

    CVE-2023-35391:
    ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

    CVE-2023-38178:
    .NET Core and Visual Studio Denial of Service Vulnerability

    CVE-2023-35390:
    .NET and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-33170:
    ASP.NET and Visual Studio Security Feature Bypass Vulnerability

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2023-35390)

  - ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability (CVE-2023-35391)

  - .NET and Visual Studio Denial of Service Vulnerability (CVE-2023-38180)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability (CVE-2023-35391)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2023-35390)

  - ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability (CVE-2023-35391)

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2023-38178)

  - .NET and Visual Studio Denial of Service Vulnerability (CVE-2023-38180)

The version of Microsoft .NET Core SDK installed on the remote host is 6.0.x prior to 6.0.121, 6.0.x prior to 6.0.316, 6.0.x prior to 6.0.413, 7.0.x prior to 7.0.110 or 7.0.x prior to 307. It is, therefore, affected by multiple vulnerabilities, as follows:

  - A vulnerability exists when some dotnet commands are used in directories with weaker permissions which   can result in remote code execution. (CVE-2023-35390)   
  - A vulnerability exists in .NET 6.0 and .NET 7.0 applications using SignalR when redis backplane use might   result in information disclosure. (CVE-2023-35391)

  - A vulnerability exists in Kestrel where, on detecting a potentially malicious client, Kestrel will   sometimes fail to disconnect it, resulting in denial of service. (CVE-2023-38180)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - .NET Core and Visual Studio Denial of Service Vulnerability. (CVE-2023-38178)

  - .NET and Visual Studio Remote Code Execution Vulnerability. (CVE-2023-35390)

  - .NET and Visual Studio Denial of Service Vulnerability. (CVE-2023-38180)

  - ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability. (CVE-2023-35391)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023_Aug_08 advisory.

  - .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2023-35390)

  - ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability (CVE-2023-35391)

  - .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2023-38178)

  - .NET and Visual Studio Denial of Service Vulnerability (CVE-2023-38180)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
333884	Photon OS 5.0: Dotnet PHSA-2025-5.0-91-0499	Nessus	PhotonOS Local Security Checks	Local	high
239977	TencentOS Server 4: dotnet6.0 (TSSA-2024:0677)	Nessus	Tencent Local Security Checks	Local	medium
239454	TencentOS Server 4: dotnet7.0 (TSSA-2024:0680)	Nessus	Tencent Local Security Checks	Local	medium
237067	Photon OS 4.0: Dotnet PHSA-2025-4.0-0804	Nessus	PhotonOS Local Security Checks	Local	high
426555	Alpine: dotnet6-runtime: security update to 6.0.21-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
426555	Alpine: dotnet6-runtime: security update to 6.0.21-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
426130	Alpine: dotnet6-build: security update to 6.0.121-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
426130	Alpine: dotnet6-build: security update to 6.0.121-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
234310	Photon OS 5.0: Dotnet PHSA-2025-5.0-0499	Nessus	PhotonOS Local Security Checks	Local	critical
416257	SCA: security update for Microsoft.AspNetCore.SignalR.Redis, Microsoft.AspNetCore.SignalR.StackExchangeRedis (GHSA-j8rm-cm55-qqj6)	Tenable Cloud Security	SCA Checks	Local	high
416257	SCA: security update for Microsoft.AspNetCore.SignalR.Redis, Microsoft.AspNetCore.SignalR.StackExchangeRedis (GHSA-j8rm-cm55-qqj6)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
404153	Alpine: dotnet7-runtime: security update to 7.0.10-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
404153	Alpine: dotnet7-runtime: security update to 7.0.10-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
404148	Alpine: dotnet7-build: security update to 7.0.110-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
404148	Alpine: dotnet7-build: security update to 7.0.110-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
180502	Security Update for .NET Core SDK (August 2023)	Nessus	Windows	Local	high
179645	Security Updates for Microsoft Visual Studio Products (August 2023)	Nessus	Windows : Microsoft Bulletins	Local	high
179502	Security Update for Microsoft .NET Core (August 2023)	Nessus	Windows	Local	high

Detections

Analytics

CVE-2023-35391

high

Tenable Plugins

high

medium

medium

high

high

high

high

high

critical

high

high

high

high

high

high

high

high

high