CVE-2024-43484

CWE-407 CWE-7899 documents7 sources

Severity

7.5HIGH

EPSS

1.2%

top 21.01%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft .net 6.0 Microsoft .net 8.0 Microsoft Microsoft .net Framework 2.0 Service Pack 2 +19 more

Timeline

PublishedOct 8

Description

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages25 packages

▶NVDmicrosoft/visual_studio_202217.6 — 17.6.20+3

▶CVEListV5microsoft/microsoft_visual_studio_2022_version_17.617.6.0 — 17.6.20

▶CVEListV5microsoft/microsoft_visual_studio_2022_version_17.817.8.0 — 17.8.15

▶CVEListV5microsoft/microsoft_visual_studio_2022_version_17.1017.10 — 17.10.8

▶CVEListV5microsoft/microsoft_visual_studio_2022_version_17.1117.11 — 17.11.5

Patches

Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

CVEList

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability↗2024-10-08

▶

GHSA

Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability↗2024-10-08

▶

OSV

Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability↗2024-10-08

▶

OSV

CVE-2024-43484↗2024-10-08

▶

OSV

dotnet6, dotnet8 vulnerabilities↗2024-10-08

▶

📋Vendor Advisories

Microsoft

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability↗2024-10-08

▶

Red Hat

dotnet: System.IO.Packaging - Multiple DoS vectors in use of SortedList↗2024-10-08

▶

Ubuntu

.NET vulnerabilities↗2024-10-08

▶