Lucene search

K
mscveMicrosoftMS:CVE-2024-38168
HistoryAug 13, 2024 - 7:00 a.m.

.NET and Visual Studio Denial of Service Vulnerability

2024-08-1307:00:00
Microsoft
msrc.microsoft.com
8
microsoft
dos
.net

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

27.8%

Affected configurations

Vulners
Node
microsoftvisual_studioRange<17.8.13
OR
microsoftvisual_studioRange<17.10.6
OR
microsoftvisual_studioRange<17.6.18
OR
microsoft.netRange<8.0.8
VendorProductVersionCPE
microsoftvisual_studio*cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*
microsoft.net*cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

27.8%