The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0156 advisory.

  - Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability     (CVE-2024-0056)

  - NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability (CVE-2024-0057)

  - Microsoft Identity Denial of service vulnerability (CVE-2024-21319)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0150 advisory.

  - Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability     (CVE-2024-0056)

  - NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability (CVE-2024-0057)

  - Microsoft Identity Denial of service vulnerability (CVE-2024-21319)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:0158 advisory.

  - Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability     (CVE-2024-0056)

  - NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability (CVE-2024-0057)

  - Microsoft Identity Denial of service vulnerability (CVE-2024-21319)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:0150 advisory.

  - Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability     (CVE-2024-0056)

  - NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability (CVE-2024-0057)

  - Microsoft Identity Denial of service vulnerability (CVE-2024-21319)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0158 advisory.

    [6.0.126-1.0.1]
    - Add support for Oracle Linux

    [6.0.126-1]
    - Update to .NET SDK 6.0.126 and Runtime 6.0.26

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7412:03 advisory.

    dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient     (SDS) (CVE-2024-0056)         dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)         dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0156 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 6.0.126 and .NET Runtime 6.0.26.

    Security Fix(es):

    * dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient (SDS) (CVE-2024-0056)

    * dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)

    * dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:0157 advisory.

  - Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability     (CVE-2024-0056)

  - NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability (CVE-2024-0057)

  - Microsoft Identity Denial of service vulnerability (CVE-2024-21319)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0150 advisory.

    [8.0.101-1.0.1]
    - Add support for Oracle Linux
    - Update to .NET SDK 8.0.101 and Runtime 8.0.1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7408:02 advisory.

    dotnet: Information Disclosure: MD.SqlClient(MDS) & System.data.SQLClient     (SDS) (CVE-2024-0056)         dotnet: X509 Certificates - Validation Bypass across Azure (CVE-2024-0057)         dotnet: .NET Denial of Service Vulnerability (CVE-2024-21319)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
187985	AlmaLinux 9 : .NET 6.0 (ALSA-2024:0156)	Nessus	Alma Linux Local Security Checks	1/12/2024	1/17/2024	critical
188007	AlmaLinux 8 : .NET 8.0 (ALSA-2024:0150)	Nessus	Alma Linux Local Security Checks	1/12/2024	1/17/2024	critical
188012	AlmaLinux 8 : .NET 6.0 (ALSA-2024:0158)	Nessus	Alma Linux Local Security Checks	1/12/2024	1/17/2024	critical
188019	Rocky Linux 8 : .NET 8.0 (RLSA-2024:0150)	Nessus	Rocky Linux Local Security Checks	1/12/2024	1/17/2024	critical
189200	Oracle Linux 8 : .NET / 6.0 (ELSA-2024-0158)	Nessus	Oracle Linux Local Security Checks	1/18/2024	9/9/2025	critical
292600	MiracleLinux 9 : dotnet7.0-7.0.115-1.el9_3.ML.1 (AXSA:2024-7412:03)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	critical
187915	RHEL 9 : .NET 6.0 (RHSA-2024:0156)	Nessus	Red Hat Local Security Checks	1/10/2024	3/6/2025	critical
188018	Rocky Linux 8 : .NET 7.0 (RLSA-2024:0157)	Nessus	Rocky Linux Local Security Checks	1/12/2024	1/17/2024	critical
190821	Oracle Linux 8 : .NET / 8.0 (ELSA-2024-0150)	Nessus	Oracle Linux Local Security Checks	2/20/2024	9/9/2025	critical
293455	MiracleLinux 8 : dotnet8.0-8.0.101-1.el8_9.ML.1 (AXSA:2024-7408:02)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical