CVE-2024-30046HighCVSS 5.9
Visual Studio Denial of Service Vulnerability
🔗 CVE IDs covered (1)
📋 Description
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to invest time in repeated exploitation attempts through sending constant or intermittent data.
🎯 Affected products6
- .NET 7.0
- .NET 8.0
- Microsoft Visual Studio 2022 version 17.4
- Microsoft Visual Studio 2022 version 17.6
- Microsoft Visual Studio 2022 version 17.8
- Microsoft Visual Studio 2022 version 17.9
✅ Remediation
KB5038351 (Security Update) — fixed build 7.0.19 KB5038352 (Security Update) — fixed build 8.0.5 KBRelease Notes (Security Update) — fixed build 17.9.7 KBRelease Notes (Security Update) — fixed build 17.4.19 KBRelease Notes (Security Update) — fixed build 17.6.15 KBRelease Notes (Security Update) — fixed build 17.8.10
🔗 References (10)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30046
- patchhttps://dotnet.microsoft.com/en-us/download/dotnet/7.0
- referencehttps://support.microsoft.com/help/5038351
- patchhttps://dotnet.microsoft.com/en-us/download/dotnet/8.0
- referencehttps://support.microsoft.com/help/5038352
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.9
- referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.4
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.6
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.8