Vulnerabilities > CVE-2024-21386 - Unspecified vulnerability in Microsoft Asp.Net Core and Visual Studio 2022

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

NVD

Published: 2024-02-13

Updated: 2024-05-29

Summary

.NET Denial of Service Vulnerability

Vulnerable Configurations

Part	Description	Count
Application	Microsoft Microsoft Asp.Net Core 8.0.0 Microsoft Asp.Net Core 7.0.0 Microsoft Asp.Net Core 7.0.1 Microsoft Asp.Net Core 7.0.2 Microsoft Asp.Net Core 7.0.3 Microsoft Asp.Net Core 7.0.4 Microsoft Asp.Net Core 7.0.5 Microsoft Asp.Net Core 7.0.7 Microsoft Asp.Net Core 7.0.8 Microsoft Asp.Net Core 7.0.9 Microsoft Asp.Net Core 7.0.10 Microsoft Asp.Net Core 7.0.11 Microsoft Asp.Net Core 7.0.12 Microsoft Asp.Net Core 6.0.0 Microsoft Asp.Net Core 6.0.1 Microsoft Asp.Net Core 6.0.2 Microsoft Asp.Net Core 6.0.3 Microsoft Asp.Net Core 6.0.4 Microsoft Asp.Net Core 6.0.5 Microsoft Asp.Net Core 6.0.6 Microsoft Asp.Net Core 6.0.7 Microsoft Asp.Net Core 6.0.8 Microsoft Asp.Net Core 6.0.9 Microsoft Asp.Net Core 6.0.10 Microsoft Asp.Net Core 6.0.11 Microsoft Asp.Net Core 6.0.12 Microsoft Asp.Net Core 6.0.13 Microsoft Asp.Net Core 6.0.14 Microsoft Asp.Net Core 6.0.15 Microsoft Asp.Net Core 6.0.16 Microsoft Asp.Net Core 6.0.18 Microsoft Asp.Net Core 6.0.19 Microsoft Asp.Net Core 6.0.20 Microsoft Asp.Net Core 6.0.21 Microsoft Asp.Net Core 6.0.22 Microsoft Asp.Net Core 6.0.23 Microsoft Visual Studio 2022 17.6.0 Microsoft Visual Studio 2022 17.6.3 Microsoft Visual Studio 2022 17.6.5 Microsoft Visual Studio 2022 17.6.6 Microsoft Visual Studio 2022 17.6.7 Microsoft Visual Studio 2022 17.6.8 Microsoft Visual Studio 2022 17.6.10 Microsoft Visual Studio 2022 17.6.11 Microsoft Visual Studio 2022 17.4.0 Microsoft Visual Studio 2022 17.4.1 Microsoft Visual Studio 2022 17.4.2 Microsoft Visual Studio 2022 17.4.3 Microsoft Visual Studio 2022 17.4.4 Microsoft Visual Studio 2022 17.4.5 Microsoft Visual Studio 2022 17.4.6 Microsoft Visual Studio 2022 17.4.7 Microsoft Visual Studio 2022 17.4.8 Microsoft Visual Studio 2022 17.4.9 Microsoft Visual Studio 2022 17.4.10 Microsoft Visual Studio 2022 17.4.11 Microsoft Visual Studio 2022 17.4.14 Microsoft Visual Studio 2022 17.4.15 Microsoft Visual Studio 2022 17.8.0 Microsoft Visual Studio 2022 17.8.4	62

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21386

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.