Skip to main content
← All vulnerabilities
CVE-2024-21386GHSA-G74Q-5XW3-J7Q9BIT-ASPNET-CORE-2024-21386

.NET Denial of Service Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.0.27, 7.0.16, 8.0.2, 17.4.16, 17.6.12, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

.NET Denial of Service Vulnerability

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Microsoft ASP.NET Core 6.0

    From 6.0 · fixed in 6.0.27

  • Microsoft ASP.NET Core 7.0

    From 7.0.0 · fixed in 7.0.16

  • Microsoft ASP.NET Core 8.0

    From 8.0 · fixed in 8.0.2

  • Microsoft Microsoft Visual Studio 2022 version 17.4

    From 17.4.0 · fixed in 17.4.16

  • Microsoft Microsoft Visual Studio 2022 version 17.6

    From 17.6.0 · fixed in 17.6.12

  • Microsoft Microsoft Visual Studio 2022 version 17.8

    From 17.8.0 · fixed in 17.8.7

  • Microsoft.AspNetCore.App.Runtime.linux-armNuGet

    fixed in 6.0.27

  • Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet

    fixed in 6.0.27

  • Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet

    fixed in 6.0.27

  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet

    fixed in 6.0.27

  • Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet

    fixed in 6.0.27

  • Microsoft.AspNetCore.App.Runtime.linux-x64NuGet

    fixed in 6.0.27

  • Microsoft.AspNetCore.App.Runtime.osx-arm64NuGet

    fixed in 6.0.27

  • Microsoft.AspNetCore.App.Runtime.osx-x64NuGet

    fixed in 6.0.27

  • Microsoft.AspNetCore.App.Runtime.win-armNuGet

    fixed in 6.0.27

  • Microsoft.AspNetCore.App.Runtime.win-arm64NuGet

    fixed in 6.0.27

  • Microsoft.AspNetCore.App.Runtime.win-x64NuGet

    fixed in 6.0.27

  • Microsoft.AspNetCore.App.Runtime.win-x86NuGet

    fixed in 6.0.27

  • Microsoft.AspNetCore.App.Runtime.linux-armNuGet

    From 7.0.0 · fixed in 7.0.16

  • Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet

    From 7.0.0 · fixed in 7.0.16

  • Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet

    From 7.0.0 · fixed in 7.0.16

  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet

    From 7.0.0 · fixed in 7.0.16

  • Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet

    From 7.0.0 · fixed in 7.0.16

  • Microsoft.AspNetCore.App.Runtime.linux-x64NuGet

    From 7.0.0 · fixed in 7.0.16

  • Microsoft.AspNetCore.App.Runtime.osx-arm64NuGet

    From 7.0.0 · fixed in 7.0.16

  • Microsoft.AspNetCore.App.Runtime.osx-x64NuGet

    From 7.0.0 · fixed in 7.0.16

  • Microsoft.AspNetCore.App.Runtime.win-armNuGet

    From 7.0.0 · fixed in 7.0.16

  • Microsoft.AspNetCore.App.Runtime.win-arm64NuGet

    From 7.0.0 · fixed in 7.0.16

  • Microsoft.AspNetCore.App.Runtime.win-x64NuGet

    From 7.0.0 · fixed in 7.0.16

  • Microsoft.AspNetCore.App.Runtime.win-x86NuGet

    From 7.0.0 · fixed in 7.0.16

  • Microsoft.AspNetCore.App.Runtime.linux-armNuGet

    From 8.0.0 · fixed in 8.0.2

  • Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet

    From 8.0.0 · fixed in 8.0.2

  • Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet

    From 8.0.0 · fixed in 8.0.2

  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet

    From 8.0.0 · fixed in 8.0.2

  • Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet

    From 8.0.0 · fixed in 8.0.2

  • Microsoft.AspNetCore.App.Runtime.linux-x64NuGet

    From 8.0.0 · fixed in 8.0.2

  • Microsoft.AspNetCore.App.Runtime.osx-arm64NuGet

    From 8.0.0 · fixed in 8.0.2

  • Microsoft.AspNetCore.App.Runtime.osx-x64NuGet

    From 8.0.0 · fixed in 8.0.2

  • Microsoft.AspNetCore.App.Runtime.win-armNuGet

    From 8.0.0 · fixed in 8.0.2

  • Microsoft.AspNetCore.App.Runtime.win-arm64NuGet

    From 8.0.0 · fixed in 8.0.2

  • Microsoft.AspNetCore.App.Runtime.win-x64NuGet

    From 8.0.0 · fixed in 8.0.2

  • Microsoft.AspNetCore.App.Runtime.win-x86NuGet

    From 8.0.0 · fixed in 8.0.2

References 1

msrc.microsoft.com