← Back

CVE-2024-43484

nvd nist
Published: Oct 8, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: secure@microsoft.com (Secondary)

Description

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Affected (17)

Microsoft
3 products
.net Framework
.net
Visual Studio 2022
Configuration A
1 vulnerable · 6 platform
Vulnerable SoftwareAffected Versions
.net Framework
Version 4.8.1
Running on/withPlatform Versions
Microsoft
Windows 10 21h2
All versions
Microsoft
Windows 10 22h2
All versions
Microsoft
Windows 11 22h2
All versions
Microsoft
Windows 11 23h2
All versions
Microsoft
Windows 11 24h2
All versions
Microsoft
Windows Server 2022 23h2
All versions
Configuration B
4 platform
Running on/withPlatform Versions
Microsoft
Windows 10 21h2
All versions
Microsoft
Windows 10 22h2
All versions
Microsoft
Windows 11 21h2
All versions
Microsoft
Windows Server 2022
All versions
Configuration C
2 platform
Running on/withPlatform Versions
Microsoft
Windows Server 2012
All versions
Microsoft
Windows Server 2012
Version r2
Configuration D
1 vulnerable
Vulnerable SoftwareAffected Versions
.net Framework
Version 4.8
Configuration E
1 vulnerable · 5 platform
Vulnerable SoftwareAffected Versions
.net Framework
Version 3.5
Running on/withPlatform Versions
Microsoft
Windows 10 1607
All versions
Microsoft
Windows 10 1607
All versions
Microsoft
Windows 10 1809
All versions
Microsoft
Windows Server 2016
All versions
Microsoft
Windows Server 2019
All versions
Configuration F
1 vulnerable
Vulnerable SoftwareAffected Versions
.net Framework
Version 3.5.1
Configuration H
3 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Microsoft
.net Framework
Version 4.7.1
.net Framework
Version 4.7.2
.net Framework
Version 4.7
Running on/withPlatform Versions
Microsoft
Windows Server 2008
Version r2 sp1
Microsoft
Windows Server 2012
All versions
Microsoft
Windows Server 2012
Version r2
Configuration I
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Microsoft
.net Framework
Version 4.6.2
.net Framework
Version 4.6
Running on/withPlatform Versions
Microsoft
Windows 10 1507
All versions
Configuration J
1 vulnerable
Vulnerable SoftwareAffected Versions
.net Framework
Version 3.0 sp2
Configuration K
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
.net Framework
Version 2.0 sp2
Running on/withPlatform Versions
Microsoft
Windows Server 2008
All versions
Microsoft
Windows Server 2008
All versions
Configuration L
2 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Microsoft
.net
From 6.0.0 to 6.0.35
.net
From 8.0.0 to 8.0.10
Running on/withPlatform Versions
Apple
Macos
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions
Configuration M
4 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Visual Studio 2022
From 17.10 to 17.10.8
Visual Studio 2022
From 17.11 to 17.11.5
Visual Studio 2022
From 17.6 to 17.6.20
Visual Studio 2022
From 17.8 to 17.8.15

Related CWEs

CWE-407
Inefficient Algorithmic Complexity
An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.
CWE-789
Memory Allocation with Excessive Size Value
The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.

References (2)

Source: secure@microsoft.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.