Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-30046
HistoryMay 14, 2024 - 12:00 a.m.

CVE-2024-30046

2024-05-1400:00:00
ubuntu.com
ubuntu.com
9
asp.net core
denial of service
dead-lock
http2outputproducer
unix
cve-2024-30046

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Visual Studio Denial of Service Vulnerability

Notes

Author Note
iconstantin only affects dotnet 7.0 and dotnet 8.0.
OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchdotnet7< 7.0.119-0ubuntu1~22.04.1UNKNOWN
ubuntu23.10noarchdotnet7< 7.0.119-0ubuntu1~23.10.1UNKNOWN
ubuntu22.04noarchdotnet8< 8.0.105-8.0.5-0ubuntu1~22.04.1UNKNOWN
ubuntu23.10noarchdotnet8< 8.0.105-8.0.5-0ubuntu1~23.10.1UNKNOWN
ubuntu24.04noarchdotnet8< 8.0.105-8.0.5-0ubuntu1~24.04.1UNKNOWN

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%