.NET and Visual Studio Denial of Service Vulnerability

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - .NET and Visual Studio Information Disclosure Vulnerability (CVE-2024-38167)

  - .NET and Visual Studio Denial of Service Vulnerability (CVE-2024-38168)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - .NET and Visual Studio Denial of Service Vulnerability (CVE-2024-38168)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including:

  - .NET and Visual Studio Information Disclosure Vulnerability. (CVE-2024-38167)   
  - .NET Core and Visual Studio Denial of Service Vulnerability. (CVE-2024-38168)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory.

  - .NET and Visual Studio Information Disclosure Vulnerability (CVE-2024-38167)

  - .NET and Visual Studio Denial of Service Vulnerability (CVE-2024-38168)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
426853	Alpine: multiple aspnetcore8-runtime packages, multiple dotnet-host packages: security update to 8.0.8-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
426853	Alpine: multiple aspnetcore8-runtime packages, multiple dotnet-host packages: security update to 8.0.8-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
412212	SCA: security update for Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.win-x86 (GHSA-7qrv-8f9x-3h32)	Tenable Cloud Security	SCA Checks	high
412212	SCA: security update for Microsoft.AspNetCore.App.Runtime.win-arm, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.win-x86 (GHSA-7qrv-8f9x-3h32)	Tenable Self-Hosted Container Security	SCA Checks	high
205591	Security Updates for Microsoft Visual Studio Products (August 2024)	Nessus	Windows : Microsoft Bulletins	medium
205451	Security Update for Microsoft .NET Core (August 2024)	Nessus	Windows	medium

Detections

Analytics

CVE-2024-38168

high

Tenable Plugins

high

high

high

high

medium

medium