What is CVE-2024-43499?

CVE-2024-43499 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. .NET and Visual Studio Denial of Service Vulnerability

Which CVE IDs does CVE-2024-43499 cover?

CVE-2024-43499 covers the following CVE IDs: CVE-2024-43499. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2024-43499?

CVE-2024-43499 has a CVSS v3 base score of 7.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2024-43499?

CVE-2024-43499 affects 10 products, including: .NET 9.0 installed on Linux; .NET 9.0 installed on Mac OS; .NET 9.0 installed on Windows; Microsoft Visual Studio 2022 version 17.10; Microsoft Visual Studio 2022 version 17.11; and others — see the full list on the advisory page.

CVE-2024-43499HighCVSS 7.5

.NET and Visual Studio Denial of Service Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

November 12, 2024

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2024-43499 →

🎯 Affected products10

.NET 9.0 installed on Linux
.NET 9.0 installed on Mac OS
.NET 9.0 installed on Windows
Microsoft Visual Studio 2022 version 17.10
Microsoft Visual Studio 2022 version 17.11
Microsoft Visual Studio 2022 version 17.6
Microsoft Visual Studio 2022 version 17.8
PowerShell 7.5 installed on Linux
PowerShell 7.5 installed on MacOS
PowerShell 7.5 installed on Windows

✅ Remediation

KBRelease Notes (Security Update) — fixed build 17.6.21 KBRelease Notes (Security Update) — fixed build 17.10.9 KBRelease Notes (Security Update) — fixed build 17.8.16 KBRelease Notes (Security Update) — fixed build 17.11.6 KBReleae Notes (Security Update) — fixed build 7.5.0 KBRelease Notes (Security Update) — fixed build 9.0.0

🔗 References (9)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43499
patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.6
referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.10
patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.8
patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.11
patchhttps://github.com/PowerShell/Announcements/issues/73
patchhttps://dotnet.microsoft.com/en-us/download/dotnet/9.0
referencehttps://github.com/dotnet/announcements/issues/333