High MSRC-CVE-2024-21392 1 CVE

.NET and Visual Studio Denial of Service Vulnerability

Published Mar 12, 2024 · Updated Apr 16, 2024 · Revision 2

Vendor: Microsoft

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
17.9.3 — https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
7.3.12 — https://github.com/PowerShell/Announcements/issues/59
7.0.17 — https://support.microsoft.com/help/5036451
8.0.3 — https://support.microsoft.com/help/5036452

Vulnerabilities 1

High 7.5

CVE-2024-21392

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.8 Ubuntu Alpine NuGet

Mar 12, 2024

Revision history

2024-04-16 #2
Revised the Security Updates table to include PowerShell 7.3 and PowerShell 7.4 because these versions of PowerShell 7 are affected by this vulnerability. See [https://github.com/PowerShell/Announcements/issues/74](https://github.com/PowerShell/Announcements/issues/74) for more information.
2024-03-12 #1
Information published.

References

CVE-2024-21392 .NET and Visual Studio Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21392
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss