遠端 Redhat Enterprise Linux 9 主機上安裝的套件受到 RHSA-2023: 3592 公告中提及的弱點影響。

  - .NET、.NET Framework 和 Visual Studio 的權限提升弱點 (CVE-2023-24936)

  - .NET、.NET Framework 和 Visual Studio 的拒絕服務弱點 (CVE-2023-29331)

  - NuGet Client 的遠端程式碼執行弱點 (CVE-2023-29337)

  - .NET 和 Visual Studio 權限提升弱點 (CVE-2023-32032)

  - .NET 和 Visual Studio 的遠端程式碼執行弱點 (CVE-2023-33128)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2023: 3593 公告中提及的多個弱點影響。

  - .NET、.NET Framework 和 Visual Studio 的權限提升弱點 (CVE-2023-24936)

  - .NET、.NET Framework 和 Visual Studio 的拒絕服務弱點 (CVE-2023-29331)

  - NuGet Client 的遠端程式碼執行弱點 (CVE-2023-29337)

  - .NET 和 Visual Studio 權限提升弱點 (CVE-2023-32032)

  - .NET 和 Visual Studio 的遠端程式碼執行弱點 (CVE-2023-33128)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Microsoft Visual Studio 產品缺少安全性更新。因此，會受到多個弱點影響：

  - MSDIA SDK 中的遠端程式碼執行弱點，其中損毀的 PDB 可造成堆積溢位，從而導致系統當機或遠端程式碼執行攻擊。(CVE-2023-24897)

  - 遠端程式碼執行弱點，攻擊者可透過對 git apply -reject 的特製輸入在任意位置寫入受控內容。(CVE-2023-25652)

  - 偽造弱點，其中 Github 當地語系化訊息會參照硬式編碼路徑，而非遵循運行時間前置詞，這會導致超出邊界記憶體寫入和損毀。(CVE-2023-25815)

  - Autodesk FBX SDK 2020 版或之前版本中的超出邊界寫入弱點，攻擊者可透過惡意特製的 FBX 檔案觸發程式碼執行攻擊或造成資訊洩漏。(CVE-2023-27909)

  - 資訊洩漏弱點，使用者可能會遭誘騙而開啟惡意的 FBX 檔案。這可能會觸發 Autodesk FBX SDK 2020 或更舊版本中的堆疊緩衝區溢位弱點 (CVE-2023-27910) 或堆積緩衝區溢位弱點 (CVE-2023-27911)，進而導致遠端程式碼執行攻擊。 

  - 遠端程式碼執行弱點，其中包含邏輯錯誤的設定檔會導致任意設定插入。(CVE-2023-29007)

  - 遠端程式碼執行弱點，其中負責實作 SOCKS5 Proxy 的 Git for Windows 可執行檔容易受到多使用者機器上未受信任的設定影響。(CVE-2023-29011)

  - 遠端程式碼執行弱點，其中 Git for Windows Git CMD 程式未在啟動時正確搜尋程式，進而導致在無訊息的情況下觸發任意程式碼執行。(CVE-2023-29012)

  - 在工具還原期間，.NET SDK 中的遠端程式碼執行弱點可導致權限提升。(CVE-2023-33135)

  - Visual Studio 的 obj 檔案剖析器中存在資訊洩漏弱點。(CVE-2023-33139)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

远程 Redhat Enterprise Linux 7 主机上安装的程序包受到 RHSA-2023: 3580 公告中提及的多个漏洞影响。

  - .NET、.NET Framework 和 Visual Studio 权限提升漏洞 (CVE-2023-24936)

  - .NET、.NET Framework 和 Visual Studio 拒绝服务漏洞 (CVE-2023-29331)

  - NuGet 客户端远程代码执行漏洞 (CVE-2023-29337)

  - .NET 和 Visual Studio 远程代码执行漏洞 (CVE-2023-33128)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Redhat Enterprise Linux 9 主机上安装的程序包受到 RHSA-2023: 3592 公告中提及的多个漏洞影响。

  - .NET、.NET Framework 和 Visual Studio 权限提升漏洞 (CVE-2023-24936)

  - .NET、.NET Framework 和 Visual Studio 拒绝服务漏洞 (CVE-2023-29331)

  - NuGet 客户端远程代码执行漏洞 (CVE-2023-29337)

  - .NET 和 Visual Studio 权限提升漏洞 (CVE-2023-32032)

  - .NET 和 Visual Studio 远程代码执行漏洞 (CVE-2023-33128)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2023: 3593 公告中提及的多个漏洞影响。

  - .NET、.NET Framework 和 Visual Studio 权限提升漏洞 (CVE-2023-24936)

  - .NET、.NET Framework 和 Visual Studio 拒绝服务漏洞 (CVE-2023-29331)

  - NuGet 客户端远程代码执行漏洞 (CVE-2023-29337)

  - .NET 和 Visual Studio 权限提升漏洞 (CVE-2023-32032)

  - .NET 和 Visual Studio 远程代码执行漏洞 (CVE-2023-33128)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2023：4448 公告中提及的多个漏洞影响。

  - .NET、.NET Framework 和 Visual Studio 拒绝服务漏洞 (CVE-2023-29331)

  - NuGet 客户端远程代码执行漏洞 (CVE-2023-29337)

  - .NET 和 Visual Studio 远程代码执行漏洞 (CVE-2023-33128)

  - ASP.NET 和 Visual Studio 的安全功能绕过漏洞 (CVE-2023-33170)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Microsoft Visual Studio 产品缺少安全更新。因此，该应用程序受到多个漏洞影响：

  - MSDIA SDK 中存在远程代码执行漏洞，损坏的 PDB 可导致堆溢出，进而导致崩溃或远程代码执行。(CVE-2023-24897)

  - 利用远程代码执行漏洞，攻击者可以通过特别构建的 git apply -reject 输入在任意位置写入受控内容。(CVE-2023-25652)

  - 由于欺骗漏洞，Github 本地化消息会引用硬编码路径，而不是遵循运行时前缀的规定，从而导致越界内存写入和崩溃。(CVE-2023-25815)

  - Autodesk FBX SDK 2020 版或更低版本中的越界写入漏洞可能会让攻击者通过恶意构建的 FBX 文件导致代码执行或导致信息泄露。(CVE-2023-27909)

  - 可能诱骗用户打开恶意 FBX 文件的信息泄露漏洞。攻击者可能会利用 Autodesk FBX SDK 2020 或更低版本中的堆栈缓冲区溢出 (CVE-2023-27910) 或堆缓冲区溢出 (CVE-2023-27911) 漏洞，从而导致远程代码执行。 

  - 包含逻辑错误的配置文件中存在远程代码执行漏洞，会导致发生任意配置注入。(CVE-2023-29007)

  - 由于存在远程代码执行漏洞，负责实现 SOCKS5 代理的 Git for Windows 可执行文件容易受到多用户计算机上不受信任的配置的影响。(CVE-2023-29011)

  - 由于存在远程代码执行漏洞，Git for Windows Git CMD 程序在启动时会错误地搜索程序，从而导致任意代码静默执行。(CVE-2023-29012)

  - 在工具还原期间，.NET SDK 中的远程代码执行漏洞可导致权限提升。(CVE-2023-33135)

  - Visual Studio 的 obj 文件解析器存在信息泄露漏洞。(CVE-2023-33139)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

The remote Ubuntu 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6161-1 advisory.

    It was discovered that .NET did not properly enforce certain restrictions when deserializing a DataSet or     DataTable from XML. An attacker could possibly use this issue to elevate their privileges.
    (CVE-2023-24936)

    Kevin Jones discovered that .NET did not properly handle the AIA fetching process for X.509 client     certificates. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-29331)

    Kalle Niemitalo discovered that the .NET package manager, NuGet, was susceptible to a potential race     condition. An attacker could possibly use this issue to perform remote code execution. (CVE-2023-29337)

    Tom Deseyn discovered that .NET did not properly process certain arguments when extracting the contents of     a tar file. An attacker could possibly use this issue to elevate their privileges. This issue only     affected the dotnet7 package. (CVE-2023-32032)

    It was discovered that .NET did not properly handle memory in certain circumstances. An attacker could     possibly use this issue to cause a denial of service or perform remote code execution. (CVE-2023-33128)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-3582 advisory.

    [6.0.118-1.0.1]
    - Add missing Oracle Linux Runtime IDs

    [6.0.118-1]
    - Update to .NET SDK 6.0.118 and Runtime 6.0.18
    - Resolves: RHBZ#2212378

    [6.0.117-2]
    - Update to .NET SDK 6.0.117 and Runtime 6.0.17
    - Resolves: RHBZ#2190262

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:3593 advisory.

  - .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-24936)

  - .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability (CVE-2023-29331)

  - NuGet Client Remote Code Execution Vulnerability (CVE-2023-29337)

  - .NET and Visual Studio Elevation of Privilege Vulnerability (CVE-2023-32032)

  - .NET and Visual Studio Remote Code Execution Vulnerability (CVE-2023-33128)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0179 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2023-24936:
      .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

      CVE-2023-29331:
      .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

      CVE-2023-29337:
      NuGet Client Remote Code Execution Vulnerability

      CVE-2023-32032:
      .NET and Visual Studio Elevation of Privilege Vulnerability

      CVE-2023-33128:
      .NET and Visual Studio Remote Code Execution Vulnerability

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0178 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2023-24936:
      .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

      CVE-2023-29331:
      .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

      CVE-2023-29337:
      NuGet Client Remote Code Execution Vulnerability

      CVE-2023-32032:
      .NET and Visual Studio Elevation of Privilege Vulnerability

      CVE-2023-33128:
      .NET and Visual Studio Remote Code Execution Vulnerability

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the dotnet package has been released.

ID	Name	Product	Family	Published	Updated	Severity
177311	RHEL 9：.NET 7.0 (RHSA-2023: 3592)	Nessus	Red Hat Local Security Checks	6/14/2023	11/7/2024	high
177315	RHEL 8：.NET 7.0 (RHSA-2023: 3593)	Nessus	Red Hat Local Security Checks	6/14/2023	11/7/2024	high
177249	Microsoft Visual Studio 產品的安全性更新 (2023 年 6 月)	Nessus	Windows : Microsoft Bulletins	6/13/2023	1/10/2024	high
177301	RHEL 7：.NET 6.0 (RHSA-2023: 3580)	Nessus	Red Hat Local Security Checks	6/14/2023	11/7/2024	high
177311	RHEL 9：.NET 7.0 (RHSA-2023: 3592)	Nessus	Red Hat Local Security Checks	6/14/2023	11/7/2024	high
177315	RHEL 8：.NET 7.0 (RHSA-2023: 3593)	Nessus	Red Hat Local Security Checks	6/14/2023	11/7/2024	high
179307	RHEL 8：.NET 6.0 (RHSA-2023: 4448)	Nessus	Red Hat Local Security Checks	8/3/2023	1/1/2025	high
177249	Microsoft Visual Studio 产品的安全更新（2023 年 6 月）	Nessus	Windows : Microsoft Bulletins	6/13/2023	1/10/2024	high
177275	Ubuntu 22.04 LTS / 23.04 : .NET vulnerabilities (USN-6161-1)	Nessus	Ubuntu Local Security Checks	6/14/2023	8/28/2024	high
177373	Oracle Linux 8 : .NET / 6.0 (ELSA-2023-3582)	Nessus	Oracle Linux Local Security Checks	6/16/2023	9/9/2025	high
180385	Rocky Linux 8 : .NET 7.0 (RLSA-2023:3593)	Nessus	Rocky Linux Local Security Checks	8/31/2023	8/31/2023	high
276191	TencentOS Server 3: .NET 6.0 (TSSA-2023:0179)	Nessus	Tencent Local Security Checks	11/20/2025	11/20/2025	high
238628	TencentOS Server 3: .NET 7.0 (TSSA-2023:0178)	Nessus	Tencent Local Security Checks	6/16/2025	11/20/2025	high
234310	Photon OS 5.0: Dotnet PHSA-2025-5.0-0499	Nessus	PhotonOS Local Security Checks	4/13/2025	4/14/2025	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high

high

high

critical