Summary
Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to invest time in repeated exploitation attempts through sending constant or intermittent data.
Security updates
7.0.19 — https://support.microsoft.com/help/5038351
8.0.5 — https://support.microsoft.com/help/5038352
17.9.7 — https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
Vulnerabilities 1
-
Medium 5.9
Visual Studio Denial of Service Vulnerability
Visual Studio Denial of Service Vulnerability
Revision history
-
#2
The following corrctions have been made: 1) Revised the Security Updates table to include .NET 7.0 and .NET 8.0 because these versions of .NET are affected by this vulnerability. Microsoft recommends that customers install the updates to be fully protected from the vulnerability. 2) Updated title to include .NET. This is an informational change only.
-
#1
Information published.
References
-
CVE-2024-30046 Visual Studio Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30046
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss