Test ID:	1.3.6.1.4.1.25623.1.0.834418
Category:	Windows
Title:	.NET Core Multiple Vulnerabilities (KB5042132)
Summary:	This host is missing an important security; update according to Microsoft KB5042132.
Description:	Summary: This host is missing an important security update according to Microsoft KB5042132. Vulnerability Insight: These vulnerabilities exist: - CVE-2024-38168: A vulnerability exists in .NET when an attacker through unauthenticated requests may trigger a Denial of Service in ASP.NET HTTP.sys web server. - CVE-2024-38167: A vulnerability exists in .NET runtime TlsStream which may result in Information Disclosure. Vulnerability Impact: Successful exploitation will allow an attacker to disclose sensitive information and conduct denial of service attacks. Affected Software/OS: .NET Core runtime prior to version 8.0.8 and .NET Core SDK prior to version 8.0.304. Solution: Update .NET Core runtime to version 8.0.8 or later and update .NET Core SDK to version 8.0.304 later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-38168 Common Vulnerability Exposure (CVE) ID: CVE-2024-38167
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.