An update of the dotnet package has been released.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-545 advisory.

    .NET Denial of Service Vulnerability (CVE-2024-20672)

    .NET Denial of Service Vulnerability (CVE-2024-21386)

    .NET Denial of Service Vulnerability (CVE-2024-21404)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tenable Identity Exposure (formerly Tenable.ad) installed on the remote host is prior to 3.59.4. It is, therefore, affected by multiple vulnerabilities in the bundled .NET core component as referenced in the TNS-2024-04 advisory.

  - .NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability (CVE-2024-0057)

  - .NET Denial of Service Vulnerability (CVE-2024-20672)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of .NET Core SDK installed on the remote host is 6.x prior to 6.0.26 or 7.x prior to 7.0.15. It is, therefore, affected by multiple vulnerabilities as referenced in the January 2024 advisory:

  - .NET Core Denial of Service Vulnerability (CVE-2024-20672)

  - .Net Core Security Feature Bypass Vulnerability (CVE-2024-0057) 

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024_Jan_09 advisory.

  - NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability (CVE-2024-0057)

  - .NET Denial of Service Vulnerability (CVE-2024-20672)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
234310	Photon OS 5.0: Dotnet PHSA-2025-5.0-0499	Nessus	PhotonOS Local Security Checks	critical
191616	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2024-545)	Nessus	Amazon Linux Local Security Checks	high
191430	Tenable Identity Exposure < 3.59.4 Multiple Vulnerabilities (TNS-2024-04)	Nessus	Misc.	critical
187900	Security Update for Microsoft .NET Core SDK (January 2024)	Nessus	Windows	critical
187859	Security Update for Microsoft .NET Core (January 2024)	Nessus	Windows	critical

Detections

Analytics

CVE-2024-20672

high

Tenable Plugins

critical

high

critical

critical

critical