Informational: Impact of Microsoft PowerShell Vulnerability CVE-2021-26701 on Cortex XSOAR

Palo Alto Networks Cortex XSOAR maintains Docker Images with PowerShell available for customers to use. The base docker images with PowerShell were updated on May 19, 2021 with PowerShell version 7.1.3. Palo Alto Networks urges customers to upgrade their docker images to a version with the tag...

Microsoft Urges Azure Users to Update PowerShell to Patch RCE Flaw

Microsoft is urging Azure users to update the PowerShell command-line tool as soon as possible to protect against a critical remote code execution vulnerability impacting .NET Core. The issue, tracked as CVE-2021-26701 CVSS score: 8.1, affects PowerShell versions 7.0 and 7.1 and have been...

Security fix for the ALT Linux 9 package dotnet-aspnetcore-5.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 and .NET SDK 5.0.202 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-runtime-5.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.14-alt1

April 17, 2021 Vitaly Lipatov 3.1.14-alt1 - .NET Core 3.1.14 and .NET Core SDK 3.1.408 - CVE-2021-26701 | .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 and .NET SDK 5.0.202 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-runtime-5.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 10 package dotnet-runtime-7.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 5.0.5-alt1

April 17, 2021 Vitaly Lipatov 5.0.5-alt1 - .NET 5.0.5 and .NET SDK 5.0.202 - CVE-2021-26701: .NET Core Remote Code Execution Vulnerability...

Fedora 33 : dotnet3.1 (2021-3da33cdc80)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-3da33cdc80 advisory. - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. CVE-2021-26701 Note that Nessus has not tested for this issue but...

Fedora: Security Advisory for dotnet5.0 (FEDORA-2021-138728e59b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 32 : dotnet5.0 (2021-138728e59b)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-138728e59b advisory. - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. CVE-2021-26701 Note that Nessus has not tested for this issue but...

[ASA-202103-20] dotnet-runtime: arbitrary code execution

Arch Linux Security Advisory ASA-202103-20 ========================================== Severity: High Date : 2021-03-25 CVE-ID : CVE-2021-26701 Package : dotnet-runtime Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1698 Summary ======= The package...

[ASA-202103-23] dotnet-sdk-3.1: arbitrary code execution

Arch Linux Security Advisory ASA-202103-23 ========================================== Severity: High Date : 2021-03-25 CVE-ID : CVE-2021-26701 Package : dotnet-sdk-3.1 Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1701 Summary ======= The package...

[ASA-202103-21] dotnet-sdk: arbitrary code execution

Arch Linux Security Advisory ASA-202103-21 ========================================== Severity: High Date : 2021-03-25 CVE-ID : CVE-2021-26701 Package : dotnet-sdk Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1698 Summary ======= The package dotnet-sdk...

Fedora 33 : dotnet5.0 (2021-1b22f31541)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-1b22f31541 advisory. - .NET Core Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24112. CVE-2021-26701 Note that Nessus has not tested for this issue but...

Security Update for .NET Core (March 2021)

The Microsoft .NET Core installation on the remote host is version 2.1.x prior to 2.1.26, 3.1.x prior to 3.1.13, or 5.x prior to 5.0.4. It is, therefore, affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and execute...

Oracle Linux 8 : dotnet (ELSA-2021-0788)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0788 advisory. 2.1.522-1 - Update to .NET Core SDK 2.1.522 and Runtime 2.1.26 - Resolves: RHBZ1933844 Tenable has extracted the preceding description block directly from the...

RHEL 8 : dotnet3.1 (RHSA-2021:0790)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0790 advisory. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

RHEL 7 : .NET Core 2.1 on Red Hat Enterprise Linux (RHSA-2021:0787)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0787 advisory. .NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...