Test Kennung:	1.3.6.1.4.1.25623.1.0.832386
Kategorie:	Windows
Titel:	.NET Core Multiple Vulnerabilities (KB5029688, KB5029689) - Windows
Zusammenfassung:	.NET Core prone to security feature bypass; and elevation of privilege vulnerabilities.
Beschreibung:	Summary: .NET Core prone to security feature bypass and elevation of privilege vulnerabilities. Vulnerability Insight: Multiple flaws exist due to, - A vulnerability exists when some dotnet commands are used in directories with weaker permissions which can result in remote code execution. - A vulnerability exists in Kestrel where, on detecting a potentially malicious client, Kestrel will sometimes fail to disconnect it, resulting in denial of service. Vulnerability Impact: Successful exploitation would allow an attacker to bypass security restrictions, achieve cross-session/cross-user elevation of privilege (EoP) and code execution. Affected Software/OS: .NET Core runtime 6.0 before 6.0.21, 7.0 before 7.0.10 and .NET Core SDK before 6.0.121, 6.0.316, 7.0.400. Solution: Upgrade to versions 6.0.21 or 7.0.10 or later or upgrade .NET Core SDK to versions 6.0.121 or 6.0.316 or 7.0.400 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35390 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CL2L4WE5QRT7WEXANYXSKSU43APC5N2V/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWVZFKTLNMNKPZ755EMRYIA6GHFOWGKY/ Common Vulnerability Exposure (CVE) ID: CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180 Common Vulnerability Exposure (CVE) ID: CVE-2023-35391 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35391 Common Vulnerability Exposure (CVE) ID: CVE-2023-38178 .NET Core and Visual Studio Denial of Service Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38178
Copyright	Copyright (C) 2023 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.