An update of the dotnet package has been released.

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows:

  - Multiple vulnerabilities in DiaSymReader.dll where parsing an corrupted PDB can result in remote code     execution. (CVE-2023-36792, CVE-2023-36793, CVE-2023-36794 CVE-2023-36796)

  - A vulnerability in the WPF XML parser where an unsandboxed parser can lead to remote code execution.
    (CVE-2023-36788)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-369 advisory.

    Visual Studio Remote Code Execution Vulnerability (CVE-2023-36792)

    Visual Studio Remote Code Execution Vulnerability (CVE-2023-36793)

    Visual Studio Remote Code Execution Vulnerability (CVE-2023-36794)

    Visual Studio Remote Code Execution Vulnerability (CVE-2023-36796)

    .NET Core and Visual Studio Denial of Service Vulnerability (CVE-2023-36799)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0677 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-44487:
    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation     can reset many streams quickly, as exploited in the wild in August through October 2023.

    CVE-2023-36794:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-38180:
    .NET and Visual Studio Denial of Service Vulnerability

    CVE-2023-35390:
    .NET and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-33170:
    ASP.NET and Visual Studio Security Feature Bypass Vulnerability

    CVE-2023-33127:
    .NET and Visual Studio Elevation of Privilege Vulnerability

    CVE-2023-29337:
    NuGet Client Remote Code Execution Vulnerability

    CVE-2023-24895:
    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-24897:
    .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-33135:
    .NET and Visual Studio Elevation of Privilege Vulnerability

    CVE-2023-33126:
    .NET and Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36792:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36793:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36796:
    Visual Studio Remote Code Execution Vulnerability

    CVE-2023-36799:
    .NET Core and Visual Studio Denial of Service Vulnerability

    CVE-2023-35391:
    ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
234310	Photon OS 5.0: Dotnet PHSA-2025-5.0-0499	Nessus	PhotonOS Local Security Checks	2025/4/13	2026/10/14	high
333884	Photon OS 5.0: Dotnet PHSA-2025-5.0-91-0499	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/8/12	high
181375	Security Updates for Microsoft .NET Framework (September 2023)	Nessus	Windows : Microsoft Bulletins	2023/9/13	2023/11/16	high
182447	Amazon Linux 2023 : aspnetcore-runtime-6.0, aspnetcore-targeting-pack-6.0, dotnet (ALAS2023-2023-369)	Nessus	Amazon Linux Local Security Checks	2023/10/3	2024/12/11	high
239977	TencentOS Server 4: dotnet6.0 (TSSA-2024:0677)	Nessus	Tencent Local Security Checks	2025/6/16	2025/12/4	medium

検出

プラグインの検索

high

high

high

high

medium