The version of .NET Core SDK installed on the remote host is 6.x prior to 6.0.27, 7.x prior to 7.0.16 or 8.x prior to 8.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the February 2024 advisory:

  - A vulnerability exists in .NET where specially crafted requests may cause a resource leak, leading to a     denial of service. (CVE-2024-21392)

  - A Vulnerability exist in MsQuic.dll which might result in a peer to allocate small chunks of memory as     long as connection stays alive. (CVE-2024-26190) 

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:1311 advisory.

  - .NET and Visual Studio Denial of Service Vulnerability (CVE-2024-21392)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:1309 advisory.

  - .NET and Visual Studio Denial of Service Vulnerability (CVE-2024-21392)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2024_Mar_12 advisory.

  - .NET and Visual Studio Denial of Service Vulnerability (CVE-2024-21392)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1309 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 7.0.117 and .NET Runtime 7.0.17.

    Security Fix(es):

    * dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1311 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 8.0.103 and .NET Runtime 8.0.3.

    Security Fix(es):

    * dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1310 advisory.

    .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new     APIs, and it includes a CLR implementation.

    New versions of .NET that address a security vulnerability are now available. The updated versions are     .NET SDK 8.0.103 and .NET Runtime 8.0.3.

    Security Fix(es):

    * dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-7614:07 advisory.

    * dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (CVE-2024-21392)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0092 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2024-21392:
    A vulnerability was found in dotnet. The YARP HTTP/2 WebSocket support in .NET Core can cause a denial of     service (DoS).

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
192026	Security Update for Microsoft .NET Core SDK (March 2024)	Nessus	Windows	3/13/2024	5/19/2026	high
192111	AlmaLinux 8 : .NET 8.0 (ALSA-2024:1311)	Nessus	Alma Linux Local Security Checks	3/14/2024	4/11/2024	high
192121	AlmaLinux 9 : .NET 7.0 (ALSA-2024:1309)	Nessus	Alma Linux Local Security Checks	3/14/2024	4/11/2024	high
192012	Security Update for Microsoft .NET Core (March 2024)	Nessus	Windows	3/13/2024	5/19/2026	high
192034	RHEL 9 : .NET 7.0 (RHSA-2024:1309)	Nessus	Red Hat Local Security Checks	3/13/2024	11/7/2024	high
192038	RHEL 8 : .NET 8.0 (RHSA-2024:1311)	Nessus	Red Hat Local Security Checks	3/13/2024	11/7/2024	high
192040	RHEL 9 : .NET 8.0 (RHSA-2024:1310)	Nessus	Red Hat Local Security Checks	3/13/2024	11/7/2024	high
292738	MiracleLinux 8 : dotnet8.0-8.0.103-1.el8_9.ML.1 (AXSA:2024-7614:07)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
239205	TencentOS Server 3: .NET 8.0 (TSSA-2024:0092)	Nessus	Tencent Local Security Checks	6/16/2025	11/20/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high