Skip to main content
← All vulnerabilities
CVE-2024-21392GHSA-5FXJ-WHCV-CRRCBIT-DOTNET-2024-21392BIT-DOTNET-SDK-2024-21392BIT-POWERSHELL-2024-21392

.NET and Visual Studio Denial of Service Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 17.9.3, 7.3.12, 7.4.1, 7.0.17, 8.0.3, and 3 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: poc
  • Automatable: yes
  • Technical impact: partial

Summary

.NET and Visual Studio Denial of Service Vulnerability

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: poc · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Microsoft Microsoft Visual Studio 2022 version 17.9

    From 17.0 · fixed in 17.9.3

  • Microsoft PowerShell 7.3

    From 7.3.0 · fixed in 7.3.12

  • Microsoft PowerShell 7.4

    From 7.4.0 · fixed in 7.4.1

  • Microsoft .NET 7.0

    From 7.0.0 · fixed in 7.0.17

  • Microsoft .NET 8.0

    From 8.0 · fixed in 8.0.3

  • Microsoft Microsoft Visual Studio 2022 version 17.6

    From 17.6.0 · fixed in 17.6.13

  • Microsoft Microsoft Visual Studio 2022 version 17.4

    From 17.4.0 · fixed in 17.4.17

  • Microsoft Microsoft Visual Studio 2022 version 17.8

    From 17.8.0 · fixed in 17.8.8

  • Microsoft.NETCore.App.Runtime.linux-armNuGet

    From 7.0.0-preview.1.22076.8 · fixed in 7.0.17

  • Microsoft.NETCore.App.Runtime.linux-armNuGet

    From 8.0.0 · fixed in 8.0.3

  • Microsoft.NETCore.App.Runtime.linux-arm64NuGet

    From 7.0.0-preview.1.22076.8 · fixed in 7.0.17

  • Microsoft.NETCore.App.Runtime.linux-arm64NuGet

    From 8.0.0 · fixed in 8.0.3

  • Microsoft.NETCore.App.Runtime.linux-musl-armNuGet

    From 7.0.0-preview.1.22076.8 · fixed in 7.0.17

  • Microsoft.NETCore.App.Runtime.linux-musl-armNuGet

    From 8.0.0 · fixed in 8.0.3

  • Microsoft.NETCore.App.Runtime.linux-musl-arm64NuGet

    From 7.0.0-preview.1.22076.8 · fixed in 7.0.17

  • Microsoft.NETCore.App.Runtime.linux-musl-arm64NuGet

    From 8.0.0 · fixed in 8.0.3

  • Microsoft.NETCore.App.Runtime.linux-musl-x64NuGet

    From 7.0.0-preview.1.22076.8 · fixed in 7.0.17

  • Microsoft.NETCore.App.Runtime.linux-musl-x64NuGet

    From 8.0.0 · fixed in 8.0.3

  • Microsoft.NETCore.App.Runtime.linux-x64NuGet

    From 8.0.0 · fixed in 8.0.3

  • Microsoft.NETCore.App.Runtime.linux-x64NuGet

    From 7.0.0-preview.1.22076.8 · fixed in 7.0.17

  • Microsoft.NETCore.App.Runtime.osx-arm64NuGet

    From 7.0.0-preview.1.22076.8 · fixed in 7.0.17

  • Microsoft.NETCore.App.Runtime.osx-arm64NuGet

    From 8.0.0 · fixed in 8.0.3

  • Microsoft.NETCore.App.Runtime.osx-x64NuGet

    From 8.0.0 · fixed in 8.0.3

  • Microsoft.NETCore.App.Runtime.osx-x64NuGet

    From 7.0.0-preview.1.22076.8 · fixed in 7.0.17

  • Microsoft.NETCore.App.Runtime.win-armNuGet

    From 7.0.0-preview.1.22076.8 · fixed in 7.0.17

  • Microsoft.NETCore.App.Runtime.win-armNuGet

    From 8.0.0 · fixed in 8.0.3

  • Microsoft.NETCore.App.Runtime.win-arm64NuGet

    From 7.0.0-preview.1.22076.8 · fixed in 7.0.17

  • Microsoft.NETCore.App.Runtime.win-arm64NuGet

    From 8.0.0 · fixed in 8.0.3

  • Microsoft.NETCore.App.Runtime.win-x64NuGet

    From 8.0.0 · fixed in 8.0.3

  • Microsoft.NETCore.App.Runtime.win-x86NuGet

    From 8.0.0 · fixed in 8.0.3

  • Microsoft.NETCore.App.Runtime.win-x86NuGet

    From 7.0.0-preview.1.22076.8 · fixed in 7.0.17

  • Microsoft.NETCore.App.Runtime.win-x64NuGet

    From 7.0.0-preview.1.22076.8 · fixed in 7.0.17

References 1

msrc.microsoft.com