Skip to main content
← All vulnerabilities
CVE-2024-38095GHSA-447R-WPH3-92PMBIT-DOTNET-2024-38095BIT-DOTNET-SDK-2024-38095

.NET and Visual Studio Denial of Service Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 7.4.4, 7.2.22, 6.0.32, 8.0.7, 17.4.21, and 5 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

.NET and Visual Studio Denial of Service Vulnerability

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Microsoft PowerShell 7.4

    From 7.4.0 · fixed in 7.4.4

  • Microsoft PowerShell 7.2

    From 7.2.0 · fixed in 7.2.22

  • Microsoft .NET 6.0

    From 6.0.0 · fixed in 6.0.32

  • Microsoft .NET 8.0

    From 8.0 · fixed in 8.0.7

  • Microsoft Microsoft Visual Studio 2022 version 17.4

    From 17.4.0 · fixed in 17.4.21

  • Microsoft Microsoft Visual Studio 2022 version 17.6

    From 17.6.0 · fixed in 17.6.17

  • Microsoft Microsoft Visual Studio 2022 version 17.8

    From 17.8.0 · fixed in 17.8.12

  • Microsoft Microsoft Visual Studio 2022 version 17.10

    From 17.10 · fixed in 17.10.4

  • Microsoft.NetCore.App.Runtime.linux-armNuGet

    From 8.0.0 · fixed in 8.0.7

  • Microsoft.NetCore.App.Runtime.linux-armNuGet

    From 6.0.0 · fixed in 6.0.32

  • Microsoft.NetCore.App.Runtime.linux-arm64NuGet

    From 8.0.0 · fixed in 8.0.7

  • Microsoft.NetCore.App.Runtime.linux-arm64NuGet

    From 6.0.0 · fixed in 6.0.32

  • Microsoft.NetCore.App.Runtime.linux-musl-armNuGet

    From 8.0.0 · fixed in 8.0.7

  • Microsoft.NetCore.App.Runtime.linux-musl-armNuGet

    From 6.0.0 · fixed in 6.0.32

  • Microsoft.NetCore.App.Runtime.linux-musl-arm64NuGet

    From 8.0.0 · fixed in 8.0.7

  • Microsoft.NetCore.App.Runtime.linux-musl-arm64NuGet

    From 6.0.0 · fixed in 6.0.32

  • Microsoft.NetCore.App.Runtime.linux-musl-x64NuGet

    From 8.0.0 · fixed in 8.0.7

  • Microsoft.NetCore.App.Runtime.linux-musl-x64NuGet

    From 6.0.0 · fixed in 6.0.32

  • Microsoft.NetCore.App.Runtime.linux-x64NuGet

    From 8.0.0 · fixed in 8.0.7

  • Microsoft.NetCore.App.Runtime.linux-x64NuGet

    From 6.0.0 · fixed in 6.0.32

  • Microsoft.NetCore.App.Runtime.osx-arm64NuGet

    From 8.0.0 · fixed in 8.0.7

  • Microsoft.NetCore.App.Runtime.osx-arm64NuGet

    From 6.0.0 · fixed in 6.0.32

  • Microsoft.NetCore.App.Runtime.osx-x64NuGet

    From 8.0.0 · fixed in 8.0.7

  • Microsoft.NetCore.App.Runtime.osx-x64NuGet

    From 6.0.0 · fixed in 6.0.32

  • Microsoft.NetCore.App.Runtime.win-armNuGet

    From 8.0.0 · fixed in 8.0.7

  • Microsoft.NetCore.App.Runtime.win-armNuGet

    From 6.0.0 · fixed in 6.0.32

  • Microsoft.NetCore.App.Runtime.win-arm64NuGet

    From 8.0.0 · fixed in 8.0.7

  • Microsoft.NetCore.App.Runtime.win-arm64NuGet

    From 6.0.0 · fixed in 6.0.32

  • Microsoft.NetCore.App.Runtime.win-x64NuGet

    From 8.0.0 · fixed in 8.0.7

  • Microsoft.NetCore.App.Runtime.win-x64NuGet

    From 6.0.0 · fixed in 6.0.32

  • Microsoft.NetCore.App.Runtime.win-x86NuGet

    From 6.0.0 · fixed in 6.0.32

  • Microsoft.NetCore.App.Runtime.win-x86NuGet

    From 8.0.0 · fixed in 8.0.7

  • System.Formats.Asn1NuGet

    From 5.0.0-preview.7.20364.11 · fixed in 6.0.1

  • System.Formats.Asn1NuGet

    From 7.0.0-preview.1.22076.8 · fixed in 8.0.1

References 1

msrc.microsoft.com