The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7210-1 advisory.

    It was discovered that .NET did not properly handle input provided to its Convert.TryToHexString method.
    An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-21171)

    It was discovered that .NET did not properly handle an integer overflow when processing certain specially     crafted files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-21172)

    Daniel Plaisted and Noah Gilson discovered that .NET insecurely handled temporary file usage which could     result in malicious package dependency injection. An attacker could possibly use this issue to elevate     privileges. (CVE-2025-21173)

    It was discovered that .NET did not properly perform input data validation when processing certain     specially crafted files. An attacker could possibly use this issue to execute arbitrary code.
    (CVE-2025-21176)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : .NET vulnerabilities (USN-7210-1)

high Nessus Plugin ID 214328

Version 1.2

Version 1.1

Version 1.2 Jul 11, 2025, 12:06 PM CVSS metrics ("CVSSv3 score" set to 7.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSSv3 score source (set to "CVE-2025-21171") Plugin Feed: 202507111206
Version 1.1 Jan 17, 2025, 6:12 PM New Plugin Feed: 202501171812