It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-242 advisory.

    .NET Denial of Service Vulnerability. (CVE-2023-21538)

    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability (CVE-2023-24895)

    .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-24936)

    .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability (CVE-2023-29331)

    NuGet Client Remote Code Execution Vulnerability (CVE-2023-29337)

    .NET and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-32032)

    .NET and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-33135)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-242)

high Nessus Plugin ID 178608

Version 1.1