Alpine: multiple aspnetcore8-runtime packages, multiple dotnet-host packages: security update to 8.0.31-r0

high Tenable Self-Hosted Container Security Plugin ID 447907

Description

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

- Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. (CVE-2026-62871,
CVE-2026-70354)

- Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
(CVE-2026-58649)

- Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
(CVE-2026-62886)

- Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
(CVE-2026-62897)

Solution

Update the aspnetcore8-runtime library and its related packages to version 8.0.31-r0 or later.

Plugin Details

Severity: High

ID: 447907

Version: Revision 1.1

Type: Local

Family: Alpine Linux Local Security Checks

Published: 9/11/2026

Updated: 9/11/2026

Supported Sensors: Agentless Assessment

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 93.75

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-70354

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 8/11/2026

Reference Information

CVE: CVE-2026-58649, CVE-2026-62871, CVE-2026-62886, CVE-2026-62897, CVE-2026-62898, CVE-2026-62899, CVE-2026-62900, CVE-2026-62901, CVE-2026-62902, CVE-2026-62909, CVE-2026-69304, CVE-2026-69439, CVE-2026-69522, CVE-2026-70354, CVE-2026-71328

Detections

Analytics