Home

Description

.NET and Visual Studio Denial of Service Vulnerability

PUBLISHED Reserved 2023-12-08 | Published 2024-03-12 | Updated 2025-05-03 | Assigner microsoft




HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

Problem types

CWE-400: Uncontrolled Resource Consumption

Product status

17.0 before 17.9.3
affected

7.3.0 before 7.3.12
affected

7.4.0 before 7.4.1
affected

7.0.0 before 7.0.17
affected

8.0 before 8.0.3
affected

17.6.0 before 17.6.13
affected

17.4.0 before 17.4.17
affected

17.8.0 before 17.8.8
affected

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21392 (.NET and Visual Studio Denial of Service Vulnerability) vendor-advisory

cve.org (CVE-2024-21392)

nvd.nist.gov (CVE-2024-21392)

Download JSON