Lucene search

Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability

🗓️ 12 Mar 2024 20:59:07Reported by GitHub Advisory DatabaseType

Microsoft .NET 7.0 and 8.0 Denial of Service Vulnerability Advisory. Specially crafted requests may cause resource leak leading to Denial of Service

Reporter	Title	Published	Views	Family All 63
Tenable Nessus	Ubuntu 22.04 LTS / 23.10 : .NET vulnerability (USN-6693-1)	12 Mar 202400:00	–	nessus
Tenable Nessus	AlmaLinux 9 : .NET 8.0 (ALSA-2024:1310)	14 Mar 202400:00	–	nessus
Tenable Nessus	Oracle Linux 8 : .NET / 8.0 (ELSA-2024-1311)	15 Mar 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : .NET 7.0 (ALSA-2024:1308)	14 Mar 202400:00	–	nessus
Tenable Nessus	AlmaLinux 9 : .NET 7.0 (ALSA-2024:1309)	14 Mar 202400:00	–	nessus
Tenable Nessus	RHEL 9 : .NET 8.0 (RHSA-2024:1310)	13 Mar 202400:00	–	nessus
Tenable Nessus	RHEL 8 : .NET 7.0 (RHSA-2024:1308)	13 Mar 202400:00	–	nessus
Tenable Nessus	Oracle Linux 9 : .NET / 8.0 (ELSA-2024-1310)	15 Mar 202400:00	–	nessus
Tenable Nessus	Oracle Linux 9 : .NET / 7.0 (ELSA-2024-1309)	15 Mar 202400:00	–	nessus
Tenable Nessus	Security Update for Microsoft .NET Core (March 2024)	13 Mar 202400:00	–	nessus

Vulners

Node

microsoft netcore.app.runtime.win-x64Range7.0.0-preview.1.22076.8–7.0.16

microsoft netcore.app.runtime.win-x86Range7.0.0-preview.1.22076.8–7.0.16

microsoft netcore.app.runtime.win-arm64Range7.0.0-preview.1.22076.8–7.0.16

microsoft netcore.app.runtime.win-armRange7.0.0-preview.1.22076.8–7.0.16

microsoft netcore.app.runtime.osx-x64Range7.0.0-preview.1.22076.8–7.0.16

microsoft netcore.app.runtime.osx-arm64Range7.0.0-preview.1.22076.8–7.0.16

microsoft netcore.app.runtime.linux-x64Range7.0.0-preview.1.22076.8–7.0.16

microsoft netcore.app.runtime.linux-musl-x64Range7.0.0-preview.1.22076.8–7.0.16

microsoft netcore.app.runtime.linux-musl-arm64Range7.0.0-preview.1.22076.8–7.0.16

microsoft netcore.app.runtime.linux-musl-armRange7.0.0-preview.1.22076.8–7.0.16

microsoft netcore.app.runtime.linux-arm64Range7.0.0-preview.1.22076.8–7.0.16

microsoft netcore.app.runtime.linux-armRange7.0.0-preview.1.22076.8–7.0.16

microsoft netcore.app.runtime.win-x86Range8.0.0–8.0.2

microsoft netcore.app.runtime.win-x64Range8.0.0–8.0.2

microsoft netcore.app.runtime.win-arm64Range8.0.0–8.0.2

microsoft netcore.app.runtime.win-armRange8.0.0–8.0.2

microsoft netcore.app.runtime.osx-x64Range8.0.0–8.0.2

microsoft netcore.app.runtime.osx-arm64Range8.0.0–8.0.2

microsoft netcore.app.runtime.linux-x64Range8.0.0–8.0.2

microsoft netcore.app.runtime.linux-musl-x64Range8.0.0–8.0.2

microsoft netcore.app.runtime.linux-musl-arm64Range8.0.0–8.0.2

microsoft netcore.app.runtime.linux-musl-armRange8.0.0–8.0.2

microsoft netcore.app.runtime.linux-arm64Range8.0.0–8.0.2

microsoft netcore.app.runtime.linux-armRange8.0.0–8.0.2

Source	Link
github	www.github.com/dotnet/runtime/security/advisories/GHSA-5fxj-whcv-crrc
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-21392
github	www.github.com/dotnet/announcements/issues/299
github	www.github.com/dotnet/runtime/issues/99621
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21392
github	www.github.com/dotnet/runtime/commit/5a958edb63110d8090c92fd34e2ae6379b23f4db
github	www.github.com/dotnet/runtime/commit/e597140113b0bcfb47f80bc2a03c17a98fac14f3
github	www.github.com/advisories/GHSA-5fxj-whcv-crrc

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Mar 2024 20:07Current

7.5High risk

Vulners AI Score7.5

CVSS37.5

EPSS0.001

SSVC

CWE-400