CVE-2024-21386HighCVSS 7.5
.NET Denial of Service Vulnerability
🔗 CVE IDs covered (1)
🎯 Affected products6
- ASP.NET Core 6.0
- ASP.NET Core 7.0
- ASP.NET Core 8.0
- Microsoft Visual Studio 2022 version 17.4
- Microsoft Visual Studio 2022 version 17.6
- Microsoft Visual Studio 2022 version 17.8
✅ Remediation
KBRelease Notes (Security Update) — fixed build 6.0.27 KBRelease Notes (Security Update) — fixed build 7.0.16 KBRelease Notes (Security Update) — fixed build 8.0.2 KBRelease Notes (Security Update) — fixed build 17.4.16 KBRelease Notes (Security Update) — fixed build 17.6.12 KBRelease Notes (Security Update) — fixed build 17.8.7
🔗 References (9)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21386
- patchhttps://dotnet.microsoft.com/download/dotnet/6.0
- referencehttps://github.com/dotnet/announcements/issues/295
- patchhttps://dotnet.microsoft.com/download/dotnet/7.0
- patchhttps://dotnet.microsoft.com/download/dotnet/8.0
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.4
- referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.6
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.8