High MSRC-CVE-2024-43484 1 CVE

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Published Oct 8, 2024 · Updated Oct 23, 2024 · Revision 3

Vendor: Microsoft

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
7.2.24 — https://github.com/PowerShell/Announcements/issues/70
17.6.20 — https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
6.0.35 — https://support.microsoft.com/help/5045998
8.0.10 — https://support.microsoft.com/help/5045993
4.7.04115.01 — https://support.microsoft.com/help/5044089
10.0.14393.7428 — https://support.microsoft.com/help/5044293
4.8.04762.01 — https://support.microsoft.com/help/5044091
4.8.04762.01 — https://support.microsoft.com/help/5044092
4.8.04762.01 — https://support.microsoft.com/help/5044090
4.7.04115.01 — https://support.microsoft.com/help/5044095
4.7.04115.03 — https://support.microsoft.com/help/5044085
4.7.4115.01 — https://support.microsoft.com/help/5044096
4.7.04115.01 — https://support.microsoft.com/help/5044097
4.8.1.9277.03 — https://support.microsoft.com/help/5044099
4.8.109277.02 — https://support.microsoft.com/help/5044033
4.8.1.09277.02 — https://support.microsoft.com/help/5044028
4.7.04115.01 — https://support.microsoft.com/help/5044098
4.7.04115.03 — https://support.microsoft.com/help/5044086
10.0.10240.20796 — https://support.microsoft.com/help/5044286
4.8.04762.01 — https://support.microsoft.com/help/5044021
4.8.1.09277.02 — https://support.microsoft.com/help/5044030

Vulnerabilities 1

High 7.5

CVE-2024-43484

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine NuGet

Oct 8, 2024

Revision history

2024-10-23 #3
Revised the Security Updates table to include PowerShell 7.2 and PowerShell 7.4 because these versions of PowerShell 7 are affected by this vulnerability. See [https://github.com/PowerShell/Announcements/issues/70](https://github.com/PowerShell/Announcements/issues/70) for more information.
2024-10-11 #2
Corrected Build Numbers in the Security Updates table. This is an informational change only.
2024-10-08 #1
Information published.

References

CVE-2024-43484 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43484
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss