.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | .NET 6.0 | affected |
|
||||||
| Microsoft | .NET 8.0 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 2.0 Service Pack 2 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 3.0 Service Pack 2 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 3.5 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 3.5 AND 4.7.2 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8.1 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 3.5.1 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 4.6.2 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 4.6/4.6.2 | affected |
|
||||||
| Microsoft | Microsoft .NET Framework 4.8 | affected |
|
||||||
| Microsoft | Microsoft Visual Studio 2022 version 17.10 | affected |
|
||||||
| Microsoft | Microsoft Visual Studio 2022 version 17.11 | affected |
|
||||||
| Microsoft | Microsoft Visual Studio 2022 version 17.6 | affected |
|
||||||
| Microsoft | Microsoft Visual Studio 2022 version 17.8 | affected |
|
||||||
| Microsoft | PowerShell 7.2 | affected |
|
||||||
| Microsoft | PowerShell 7.4 | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
Configuration 8 [-]
| AND |
|
Configuration 9 [-]
| AND |
|
Configuration 10 [-]
| AND |
|
Configuration 11 [-]
| AND |
|
Configuration 12 [-]
| AND |
|
Configuration 13 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | |||
| dotnet6.0-0:6.0.135-1.el8_10 | cpe:/a:redhat:enterprise_linux:8 | RHSA-2024:7851 | 2024-10-09T00:00:00Z |
| dotnet8.0-0:8.0.110-1.el8_10 | cpe:/a:redhat:enterprise_linux:8 | RHSA-2024:7868 | 2024-10-09T00:00:00Z |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | |||
| dotnet6.0-0:6.0.135-1.el8_6 | cpe:/a:redhat:rhel_aus:8.6 | RHSA-2024:8082 | 2024-10-14T00:00:00Z |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | |||
| dotnet6.0-0:6.0.135-1.el8_6 | cpe:/a:redhat:rhel_tus:8.6 | RHSA-2024:8082 | 2024-10-14T00:00:00Z |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | |||
| dotnet6.0-0:6.0.135-1.el8_6 | cpe:/a:redhat:rhel_e4s:8.6 | RHSA-2024:8082 | 2024-10-14T00:00:00Z |
| Red Hat Enterprise Linux 8.8 Extended Update Support | |||
| dotnet6.0-0:6.0.135-1.el8_8 | cpe:/a:redhat:rhel_eus:8.8 | RHSA-2024:8036 | 2024-10-14T00:00:00Z |
| Red Hat Enterprise Linux 9 | |||
| dotnet6.0-0:6.0.135-1.el9_4 | cpe:/a:redhat:enterprise_linux:9 | RHSA-2024:7867 | 2024-10-09T00:00:00Z |
| dotnet8.0-0:8.0.110-1.el9_4 | cpe:/a:redhat:enterprise_linux:9 | RHSA-2024:7869 | 2024-10-09T00:00:00Z |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | |||
| dotnet6.0-0:6.0.135-1.el9_0 | cpe:/a:redhat:rhel_e4s:9.0 | RHSA-2024:8048 | 2024-10-14T00:00:00Z |
| Red Hat Enterprise Linux 9.2 Extended Update Support | |||
| dotnet6.0-0:6.0.135-1.el9_2 | cpe:/a:redhat:rhel_eus:9.2 | RHSA-2024:8047 | 2024-10-14T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2024-3115 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability |
Github GHSA |
GHSA-qj66-m88j-hmgj | Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability |
Ubuntu USN |
USN-7058-1 | .NET vulnerabilities |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: 2.9% (2.897% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microsoft powershell
Microsoft visual Studio |
|
| CPEs | cpe:2.3:a:microsoft:.net:*:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft powershell
Microsoft visual Studio |
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:microsoft:.net:3.0:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:3.5.1:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:3.5:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:6.0.0:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:8.0.0:*:*:*:*:*:*:* cpe:2.3:a:microsoft:powershell:7.2:*:*:*:*:*:*:* cpe:2.3:a:microsoft:powershell:7.4:-:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio:2022:*:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft powershell
Microsoft visual Studio |
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microsoft powershell
|
|
| CPEs | cpe:2.3:a:microsoft:powershell:7.2:*:*:*:*:*:*:* cpe:2.3:a:microsoft:powershell:7.4:-:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft powershell
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Apple
Apple macos Linux Linux linux Kernel Microsoft visual Studio 2022 Microsoft windows Microsoft windows 10 1507 Microsoft windows 10 1607 Microsoft windows 10 1809 Microsoft windows 10 21h2 Microsoft windows 10 22h2 Microsoft windows 11 21h2 Microsoft windows 11 22h2 Microsoft windows 11 23h2 Microsoft windows 11 24h2 Microsoft windows Server 2008 Microsoft windows Server 2012 Microsoft windows Server 2016 Microsoft windows Server 2019 Microsoft windows Server 2022 Microsoft windows Server 2022 23h2 |
|
| Weaknesses | NVD-CWE-noinfo | |
| CPEs | cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_11_24h2:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:* cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Apple
Apple macos Linux Linux linux Kernel Microsoft visual Studio 2022 Microsoft windows Microsoft windows 10 1507 Microsoft windows 10 1607 Microsoft windows 10 1809 Microsoft windows 10 21h2 Microsoft windows 10 22h2 Microsoft windows 11 21h2 Microsoft windows 11 22h2 Microsoft windows 11 23h2 Microsoft windows 11 24h2 Microsoft windows Server 2008 Microsoft windows Server 2012 Microsoft windows Server 2016 Microsoft windows Server 2019 Microsoft windows Server 2022 Microsoft windows Server 2022 23h2 |
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhel Aus
Redhat rhel Tus |
|
| CPEs | cpe:/a:redhat:rhel_aus:8.6 cpe:/a:redhat:rhel_e4s:8.6 cpe:/a:redhat:rhel_tus:8.6 |
|
| Vendors & Products |
Redhat rhel Aus
Redhat rhel Tus |
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhel E4s
Redhat rhel Eus |
|
| CPEs | cpe:/a:redhat:rhel_e4s:9.0 cpe:/a:redhat:rhel_eus:8.8 cpe:/a:redhat:rhel_eus:9.2 |
|
| Vendors & Products |
Redhat rhel E4s
Redhat rhel Eus |
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat
Redhat enterprise Linux |
|
| CPEs | cpe:/a:redhat:enterprise_linux:8 cpe:/a:redhat:enterprise_linux:9 |
|
| Vendors & Products |
Redhat
Redhat enterprise Linux |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | |
| Title | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability | |
| First Time appeared |
Microsoft
Microsoft .net Microsoft .net Framework Microsoft visual Studio |
|
| Weaknesses | CWE-407 | |
| CPEs | cpe:2.3:a:microsoft:.net:2.0:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:3.0:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:3.5.1:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:3.5:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:6.0.0:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net:8.0.0:*:*:*:*:*:*:* cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:* cpe:2.3:a:microsoft:visual_studio:2022:*:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft
Microsoft .net Microsoft .net Framework Microsoft visual Studio |
|
| References |
| |
| Metrics |
cvssV3_1
|