Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-21312 (GCVE-0-2024-21312)
Vulnerability from cvelistv5 – Published: 2024-01-09 17:57 – Updated: 2025-05-03 01:46- CWE-20 - Improper Input Validation
| URL | Tags |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerabi… | vendor-advisory |
| Vendor | Product | Version | |
|---|---|---|---|
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8.1 |
Affected:
4.8.1 , < 4.8.09214.01
(custom)
|
|
| Microsoft | Microsoft .NET Framework 4.8 |
Affected:
4.8.0 , < 4.8.04690.02
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 AND 4.8 |
Affected:
4.8.0 , < 4.8.04690.02
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 AND 4.7.2 |
Affected:
4.7.0 , < 4.7.04081.03
(custom)
|
|
| Microsoft | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 |
Affected:
4.7.0 , < 4.7.04081.02
(custom)
|
|
| Microsoft | Microsoft .NET Framework 3.5 |
Affected:
3.5.0 , < 3.0.50727.8976
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T22:20:39.910Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": ".NET Framework Denial of Service Vulnerability",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20240208-0008/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-21312",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-01-10T18:55:02.499748Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-04-17T17:20:48.007Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"platforms": [
"Windows 11 Version 23H2 for x64-based Systems",
"Windows 11 Version 23H2 for ARM64-based Systems",
"Windows Server 2022",
"Windows Server 2022 (Server Core installation)",
"Windows 11 version 21H2 for x64-based Systems",
"Windows 11 version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 11 Version 22H2 for ARM64-based Systems",
"Windows 11 Version 22H2 for x64-based Systems",
"Windows 10 Version 22H2 for x64-based Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 22H2 for 32-bit Systems"
],
"product": "Microsoft .NET Framework 3.5 AND 4.8.1",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.8.09214.01",
"status": "affected",
"version": "4.8.1",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1607 for 32-bit Systems",
"Windows 10 Version 1607 for x64-based Systems",
"Windows Server 2016",
"Windows Server 2016 (Server Core installation)",
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.8",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.8.04690.02",
"status": "affected",
"version": "4.8.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1809 for 32-bit Systems",
"Windows 10 Version 1809 for x64-based Systems",
"Windows Server 2019",
"Windows Server 2019 (Server Core installation)",
"Windows Server 2022",
"Windows Server 2022 (Server Core installation)",
"Windows 11 version 21H2 for x64-based Systems",
"Windows 11 version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for 32-bit Systems",
"Windows 10 Version 21H2 for ARM64-based Systems",
"Windows 10 Version 21H2 for x64-based Systems",
"Windows 10 Version 22H2 for x64-based Systems",
"Windows 10 Version 22H2 for ARM64-based Systems",
"Windows 10 Version 22H2 for 32-bit Systems"
],
"product": "Microsoft .NET Framework 3.5 AND 4.8",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.8.04690.02",
"status": "affected",
"version": "4.8.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows 10 Version 1809 for 32-bit Systems",
"Windows 10 Version 1809 for x64-based Systems",
"Windows 10 Version 1809 for ARM64-based Systems",
"Windows Server 2019",
"Windows Server 2019 (Server Core installation)",
"Windows 10 Version 1607 for 32-bit Systems",
"Windows 10 Version 1607 for x64-based Systems",
"Windows Server 2016",
"Windows Server 2016 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5 AND 4.7.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.7.04081.03",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2008 R2 for x64-based Systems Service Pack 1",
"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "4.7.04081.02",
"status": "affected",
"version": "4.7.0",
"versionType": "custom"
}
]
},
{
"platforms": [
"Windows Server 2012",
"Windows Server 2012 (Server Core installation)",
"Windows Server 2012 R2",
"Windows Server 2012 R2 (Server Core installation)"
],
"product": "Microsoft .NET Framework 3.5",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "3.0.50727.8976",
"status": "affected",
"version": "3.5.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.8.09214.01",
"versionStartIncluding": "4.8.1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.8.04690.02",
"versionStartIncluding": "4.8.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.8.04690.02",
"versionStartIncluding": "4.8.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.7.04081.03",
"versionStartIncluding": "4.7.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.7.04081.02",
"versionStartIncluding": "4.7.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.0.50727.8976",
"versionStartIncluding": "3.5.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2024-01-09T08:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": ".NET Framework Denial of Service Vulnerability"
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20: Improper Input Validation",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-03T01:46:51.880Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": ".NET Framework Denial of Service Vulnerability",
"tags": [
"vendor-advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312"
}
],
"title": ".NET Framework Denial of Service Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2024-21312",
"datePublished": "2024-01-09T17:57:10.583Z",
"dateReserved": "2023-12-08T22:45:19.366Z",
"dateUpdated": "2025-05-03T01:46:51.880Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2024-21312",
"date": "2026-05-29",
"epss": "0.05878",
"percentile": "0.90714"
},
"fkie_nvd": {
"configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"23317443-1968-4791-9F20-AD3B308A83D1\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"23317443-1968-4791-9F20-AD3B308A83D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"934D4E46-12C1-41DC-A28C-A2C430E965E4\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F513002-D8C1-4D3A-9F79-4B52498F67E9\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4D8DC08D-A860-493A-8AA6-1AD4A0A511AD\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BB4AE761-6FAC-4000-A63D-42CE3FAB8412\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D4793BFB-2E4E-4067-87A5-4B8749025CA3\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"42D329B2-432D-4029-87EB-4C3C5F55CD95\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"821614DD-37DD-44E2-A8A4-FE8D23A33C3C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"734112B3-1383-4BE3-8721-C0F84566B764\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36B0E40A-84EF-4099-A395-75D6B8CDA196\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\", \"matchCriteriaId\": \"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"23317443-1968-4791-9F20-AD3B308A83D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"61019899-D7AF-46E4-A72C-D189180F66AB\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2E332666-2E03-468E-BC30-299816D6E8ED\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB79EE26-FC32-417D-A49C-A1A63165A968\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2D3F18AF-84ED-473B-A8DF-65EB23C475AF\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"61019899-D7AF-46E4-A72C-D189180F66AB\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"23317443-1968-4791-9F20-AD3B308A83D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2D3F18AF-84ED-473B-A8DF-65EB23C475AF\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2E332666-2E03-468E-BC30-299816D6E8ED\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F513002-D8C1-4D3A-9F79-4B52498F67E9\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4D8DC08D-A860-493A-8AA6-1AD4A0A511AD\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BB4AE761-6FAC-4000-A63D-42CE3FAB8412\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DB79EE26-FC32-417D-A49C-A1A63165A968\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"821614DD-37DD-44E2-A8A4-FE8D23A33C3C\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \".NET Framework Denial of Service Vulnerability\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de denegaci\\u00f3n de servicio de .NET Framework\"}]",
"id": "CVE-2024-21312",
"lastModified": "2024-11-21T08:54:05.020",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"secure@microsoft.com\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}]}",
"published": "2024-01-09T18:15:55.080",
"references": "[{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312\", \"source\": \"secure@microsoft.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240208-0008/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"secure@microsoft.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-21312\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2024-01-09T18:15:55.080\",\"lastModified\":\"2024-11-21T08:54:05.020\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\".NET Framework Denial of Service Vulnerability\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de denegaci\u00f3n de servicio de .NET Framework\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"23317443-1968-4791-9F20-AD3B308A83D1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"23317443-1968-4791-9F20-AD3B308A83D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"934D4E46-12C1-41DC-A28C-A2C430E965E4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F513002-D8C1-4D3A-9F79-4B52498F67E9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D8DC08D-A860-493A-8AA6-1AD4A0A511AD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB4AE761-6FAC-4000-A63D-42CE3FAB8412\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D4793BFB-2E4E-4067-87A5-4B8749025CA3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"42D329B2-432D-4029-87EB-4C3C5F55CD95\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"821614DD-37DD-44E2-A8A4-FE8D23A33C3C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"734112B3-1383-4BE3-8721-C0F84566B764\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36B0E40A-84EF-4099-A395-75D6B8CDA196\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*\",\"matchCriteriaId\":\"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"23317443-1968-4791-9F20-AD3B308A83D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF7A75E-EE27-4AA7-8D84-9D696728A4CE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"61019899-D7AF-46E4-A72C-D189180F66AB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E332666-2E03-468E-BC30-299816D6E8ED\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB79EE26-FC32-417D-A49C-A1A63165A968\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D3F18AF-84ED-473B-A8DF-65EB23C475AF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"61019899-D7AF-46E4-A72C-D189180F66AB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7DF96F8-BA6A-4780-9CA3-F719B3F81074\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB18C4CE-5917-401E-ACF7-2747084FD36E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"23317443-1968-4791-9F20-AD3B308A83D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D3F18AF-84ED-473B-A8DF-65EB23C475AF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E332666-2E03-468E-BC30-299816D6E8ED\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F513002-D8C1-4D3A-9F79-4B52498F67E9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D8DC08D-A860-493A-8AA6-1AD4A0A511AD\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB4AE761-6FAC-4000-A63D-42CE3FAB8412\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB79EE26-FC32-417D-A49C-A1A63165A968\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"821614DD-37DD-44E2-A8A4-FE8D23A33C3C\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312\",\"source\":\"secure@microsoft.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240208-0008/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312\", \"name\": \".NET Framework Denial of Service Vulnerability\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240208-0008/\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-01T22:20:39.910Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-21312\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-01-10T18:55:02.499748Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-04-17T17:20:40.479Z\"}}], \"cna\": {\"title\": \".NET Framework Denial of Service Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5 AND 4.8.1\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.8.1\", \"lessThan\": \"4.8.09214.01\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows 11 Version 23H2 for x64-based Systems\", \"Windows 11 Version 23H2 for ARM64-based Systems\", \"Windows Server 2022\", \"Windows Server 2022 (Server Core installation)\", \"Windows 11 version 21H2 for x64-based Systems\", \"Windows 11 version 21H2 for ARM64-based Systems\", \"Windows 10 Version 21H2 for 32-bit Systems\", \"Windows 10 Version 21H2 for ARM64-based Systems\", \"Windows 10 Version 21H2 for x64-based Systems\", \"Windows 11 Version 22H2 for ARM64-based Systems\", \"Windows 11 Version 22H2 for x64-based Systems\", \"Windows 10 Version 22H2 for x64-based Systems\", \"Windows 10 Version 22H2 for ARM64-based Systems\", \"Windows 10 Version 22H2 for 32-bit Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 4.8\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.8.0\", \"lessThan\": \"4.8.04690.02\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows 10 Version 1607 for 32-bit Systems\", \"Windows 10 Version 1607 for x64-based Systems\", \"Windows Server 2016\", \"Windows Server 2016 (Server Core installation)\", \"Windows Server 2012\", \"Windows Server 2012 (Server Core installation)\", \"Windows Server 2012 R2\", \"Windows Server 2012 R2 (Server Core installation)\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5 AND 4.8\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.8.0\", \"lessThan\": \"4.8.04690.02\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows 10 Version 1809 for 32-bit Systems\", \"Windows 10 Version 1809 for x64-based Systems\", \"Windows Server 2019\", \"Windows Server 2019 (Server Core installation)\", \"Windows Server 2022\", \"Windows Server 2022 (Server Core installation)\", \"Windows 11 version 21H2 for x64-based Systems\", \"Windows 11 version 21H2 for ARM64-based Systems\", \"Windows 10 Version 21H2 for 32-bit Systems\", \"Windows 10 Version 21H2 for ARM64-based Systems\", \"Windows 10 Version 21H2 for x64-based Systems\", \"Windows 10 Version 22H2 for x64-based Systems\", \"Windows 10 Version 22H2 for ARM64-based Systems\", \"Windows 10 Version 22H2 for 32-bit Systems\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5 AND 4.7.2\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.7.0\", \"lessThan\": \"4.7.04081.03\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows 10 Version 1809 for 32-bit Systems\", \"Windows 10 Version 1809 for x64-based Systems\", \"Windows 10 Version 1809 for ARM64-based Systems\", \"Windows Server 2019\", \"Windows Server 2019 (Server Core installation)\", \"Windows 10 Version 1607 for 32-bit Systems\", \"Windows 10 Version 1607 for x64-based Systems\", \"Windows Server 2016\", \"Windows Server 2016 (Server Core installation)\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.7.0\", \"lessThan\": \"4.7.04081.02\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows Server 2008 R2 for x64-based Systems Service Pack 1\", \"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)\", \"Windows Server 2012\", \"Windows Server 2012 (Server Core installation)\", \"Windows Server 2012 R2\", \"Windows Server 2012 R2 (Server Core installation)\"]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft .NET Framework 3.5\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.5.0\", \"lessThan\": \"3.0.50727.8976\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows Server 2012\", \"Windows Server 2012 (Server Core installation)\", \"Windows Server 2012 R2\", \"Windows Server 2012 R2 (Server Core installation)\"]}], \"datePublic\": \"2024-01-09T08:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312\", \"name\": \".NET Framework Denial of Service Vulnerability\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \".NET Framework Denial of Service Vulnerability\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-20\", \"description\": \"CWE-20: Improper Input Validation\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.8.09214.01\", \"versionStartIncluding\": \"4.8.1\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.8.04690.02\", \"versionStartIncluding\": \"4.8.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.8.04690.02\", \"versionStartIncluding\": \"4.8.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.7.04081.03\", \"versionStartIncluding\": \"4.7.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.7.04081.02\", \"versionStartIncluding\": \"4.7.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"3.0.50727.8976\", \"versionStartIncluding\": \"3.5.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2025-05-03T01:46:51.880Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-21312\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-03T01:46:51.880Z\", \"dateReserved\": \"2023-12-08T22:45:19.366Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2024-01-09T17:57:10.583Z\", \"assignerShortName\": \"microsoft\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2024-AVI-0022
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Microsoft .Net. Elles permettent à un attaquant de provoquer un contournement de la fonctionnalité de sécurité et un déni de service.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Microsoft .NET Framework 4.8 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.0 Service Pack 2 | ||
| Microsoft | N/A | .NET 8.0 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 et 4.8.1 | ||
| Microsoft | N/A | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 et 4.8 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 et 4.7.2 | ||
| Microsoft | N/A | .NET 7.0 | ||
| Microsoft | N/A | Microsoft .NET Framework 2.0 Service Pack 2 | ||
| Microsoft | N/A | .NET 6.0 |
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft .NET Framework 4.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.0 Service Pack 2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 8.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 et 4.8.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 et 4.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 et 4.7.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 7.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 2.0 Service Pack 2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 6.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2024-0057",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0057"
},
{
"name": "CVE-2024-0056",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0056"
},
{
"name": "CVE-2024-21319",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21319"
},
{
"name": "CVE-2024-21312",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21312"
},
{
"name": "CVE-2024-20672",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20672"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21312 du 09 janvier 2024",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-0056 du 09 janvier 2024",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0056"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-20672 du 09 janvier 2024",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20672"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21319 du 09 janvier 2024",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21319"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-0057 du 09 janvier 2024",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057"
}
],
"reference": "CERTFR-2024-AVI-0022",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-01-10T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft .Net\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9 et un d\u00e9ni\nde service.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft .Net",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 09 janvier 2024",
"url": "https://msrc.microsoft.com/update-guide/"
}
]
}
CERTFR-2024-AVI-0022
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Microsoft .Net. Elles permettent à un attaquant de provoquer un contournement de la fonctionnalité de sécurité et un déni de service.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Microsoft | N/A | Microsoft .NET Framework 4.8 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.0 Service Pack 2 | ||
| Microsoft | N/A | .NET 8.0 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 et 4.8.1 | ||
| Microsoft | N/A | Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 et 4.8 | ||
| Microsoft | N/A | Microsoft .NET Framework 3.5 et 4.7.2 | ||
| Microsoft | N/A | .NET 7.0 | ||
| Microsoft | N/A | Microsoft .NET Framework 2.0 Service Pack 2 | ||
| Microsoft | N/A | .NET 6.0 |
| Title | Publication Time | Tags | |
|---|---|---|---|
|
|
|||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft .NET Framework 4.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.0 Service Pack 2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 8.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 et 4.8.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 et 4.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 3.5 et 4.7.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 7.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Microsoft .NET Framework 2.0 Service Pack 2",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": ".NET 6.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2024-0057",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0057"
},
{
"name": "CVE-2024-0056",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0056"
},
{
"name": "CVE-2024-21319",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21319"
},
{
"name": "CVE-2024-21312",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-21312"
},
{
"name": "CVE-2024-20672",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20672"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21312 du 09 janvier 2024",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-0056 du 09 janvier 2024",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0056"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-20672 du 09 janvier 2024",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20672"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21319 du 09 janvier 2024",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21319"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-0057 du 09 janvier 2024",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0057"
}
],
"reference": "CERTFR-2024-AVI-0022",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-01-10T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft .Net\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer un contournement de la fonctionnalit\u00e9 de s\u00e9curit\u00e9 et un d\u00e9ni\nde service.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft .Net",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 09 janvier 2024",
"url": "https://msrc.microsoft.com/update-guide/"
}
]
}
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "TO981, TO982, TO986, TO987",
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": "TO981 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f .NET Framework 3.5 \u0438 4.8 \u0434\u043b\u044f Windows 11 21H2 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5033912), TO982 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f .NET Framework 3.5 \u0438 4.8.1 \u0434\u043b\u044f Windows 11 21H2 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5033919), TO986 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 .NET Framework 3.5 \u0438 4.7.2 \u0434\u043b\u044f Windows 10 1809 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5033904), TO987 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 .NET Framework 3.5 \u0438 4.8 \u0434\u043b\u044f Windows 10 1809 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5033911)",
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Microsoft .NET Framework 3.5), - (Microsoft .NET Framework 4.7), - (Microsoft .NET Framework 4.6.2), - (Microsoft .NET Framework 4.7.1), - (Microsoft .NET Framework 4.7.2), - (Microsoft .NET Framework 4.8), - (Microsoft .NET Framework 4.8.1)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "09.01.2024",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "15.01.2024",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "15.01.2024",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-00282",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-21312",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7, Microsoft .NET Framework 4.6.2, Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.7.2, Microsoft .NET Framework 4.8, Microsoft .NET Framework 4.8.1",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Microsoft Corp Windows Server 2012 - , Microsoft Corp Windows Server 2012 R2 - , Microsoft Corp Windows Server 2008 R2 Service Pack 1 - 64-bit, Microsoft Corp Windows 10 1607 - 64-bit, Microsoft Corp Windows 10 1607 - 32-bit, Microsoft Corp Windows Server 2016 - , Microsoft Corp Windows Server 2012 R2 (Server Core installation) - , Microsoft Corp Windows Server 2016 (Server Core installation) - , Microsoft Corp Windows 10 1809 - 64-bit, Microsoft Corp Windows 10 1809 - 32-bit, Microsoft Corp Windows Server 2019 - , Microsoft Corp Windows Server 2019 (Server Core installation) - , Microsoft Corp Windows 10 1809 - ARM64, Microsoft Corp Windows Server 2008 R2 (Server Core installation) - 64-bit, Microsoft Corp Windows Server 2022 - , Microsoft Corp Windows Server 2022 (Server Core installation) - , Microsoft Corp Windows 10 21H2 - 64-bit, Microsoft Corp Windows 10 21H2 - 32-bit, Microsoft Corp Windows 10 21H2 - ARM64, Microsoft Corp Windows 11 22H2 - 64-bit, Microsoft Corp Windows 11 22H2 - ARM64, Microsoft Corp Windows 10 22H2 - 64-bit, Microsoft Corp Windows 10 22H2 - ARM64, Microsoft Corp Windows 10 22H2 - 32-bit, Microsoft Corp Windows 11 21H2 - 64-bit, Microsoft Corp Windows 11 21H2 - ARM64, Microsoft Corp Windows Server 2012 (Server Core installation) - , Microsoft Corp Windows 11 23H2 - ARM64",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Microsoft .NET Framework, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0437\u0430\u0447\u0438\u0441\u0442\u043a\u043e\u0439 \u0438\u043b\u0438 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u0437\u0430\u0447\u0438\u0441\u0442\u043a\u0430 \u0438\u043b\u0438 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 (CWE-404)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Microsoft .NET Framework \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0437\u0430\u0447\u0438\u0441\u0442\u043a\u043e\u0439 \u0438\u043b\u0438 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-404",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}
FKIE_CVE-2024-21312
Vulnerability from fkie_nvd - Published: 2024-01-09 18:15 - Updated: 2024-11-21 08:54{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*",
"matchCriteriaId": "23317443-1968-4791-9F20-AD3B308A83D1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*",
"matchCriteriaId": "23317443-1968-4791-9F20-AD3B308A83D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "934D4E46-12C1-41DC-A28C-A2C430E965E4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2F513002-D8C1-4D3A-9F79-4B52498F67E9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4D8DC08D-A860-493A-8AA6-1AD4A0A511AD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB4AE761-6FAC-4000-A63D-42CE3FAB8412",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D4793BFB-2E4E-4067-87A5-4B8749025CA3",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "42D329B2-432D-4029-87EB-4C3C5F55CD95",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
"matchCriteriaId": "821614DD-37DD-44E2-A8A4-FE8D23A33C3C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"matchCriteriaId": "734112B3-1383-4BE3-8721-C0F84566B764",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "36B0E40A-84EF-4099-A395-75D6B8CDA196",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*",
"matchCriteriaId": "23317443-1968-4791-9F20-AD3B308A83D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
"matchCriteriaId": "61019899-D7AF-46E4-A72C-D189180F66AB",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2E332666-2E03-468E-BC30-299816D6E8ED",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "2D3F18AF-84ED-473B-A8DF-65EB23C475AF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
"matchCriteriaId": "61019899-D7AF-46E4-A72C-D189180F66AB",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*",
"matchCriteriaId": "23317443-1968-4791-9F20-AD3B308A83D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "2D3F18AF-84ED-473B-A8DF-65EB23C475AF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2E332666-2E03-468E-BC30-299816D6E8ED",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2F513002-D8C1-4D3A-9F79-4B52498F67E9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4D8DC08D-A860-493A-8AA6-1AD4A0A511AD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB4AE761-6FAC-4000-A63D-42CE3FAB8412",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
"matchCriteriaId": "821614DD-37DD-44E2-A8A4-FE8D23A33C3C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": ".NET Framework Denial of Service Vulnerability"
},
{
"lang": "es",
"value": "Vulnerabilidad de denegaci\u00f3n de servicio de .NET Framework"
}
],
"id": "CVE-2024-21312",
"lastModified": "2024-11-21T08:54:05.020",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
},
"published": "2024-01-09T18:15:55.080",
"references": [
{
"source": "secure@microsoft.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://security.netapp.com/advisory/ntap-20240208-0008/"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-3QXP-WV2V-JFC4
Vulnerability from github – Published: 2024-01-09 18:30 – Updated: 2024-04-11 21:30.NET Framework Denial of Service Vulnerability
{
"affected": [],
"aliases": [
"CVE-2024-21312"
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-01-09T18:15:55Z",
"severity": "HIGH"
},
"details": ".NET Framework Denial of Service Vulnerability",
"id": "GHSA-3qxp-wv2v-jfc4",
"modified": "2024-04-11T21:30:44Z",
"published": "2024-01-09T18:30:29Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21312"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240208-0008"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2024-21312
Vulnerability from gsd - Updated: 2023-12-13 01:21{
"GSD": {
"alias": "CVE-2024-21312",
"id": "GSD-2024-21312"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2024-21312"
],
"details": ".NET Framework Denial of Service Vulnerability",
"id": "GSD-2024-21312",
"modified": "2023-12-13T01:21:42.753228Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2024-21312",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Microsoft .NET Framework 3.5 AND 4.8.1",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.8.1",
"version_value": "4.8.09214.01"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.8",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.8.0",
"version_value": "4.8.04690.02"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5 AND 4.8",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.8.0",
"version_value": "4.8.04690.02"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5 AND 4.7.2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.7.0",
"version_value": "4.7.04081.03"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "4.7.0",
"version_value": "4.7.04081.02"
}
]
}
},
{
"product_name": "Microsoft .NET Framework 3.5",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "3.5.0",
"version_value": "3.0.50727.8976"
}
]
}
}
]
},
"vendor_name": "Microsoft"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": ".NET Framework Denial of Service Vulnerability"
}
]
},
"impact": {
"cvss": [
{
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"cweId": "CWE-20",
"lang": "eng",
"value": "CWE-20: Improper Input Validation"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312",
"refsource": "MISC",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312"
},
{
"name": "https://security.netapp.com/advisory/ntap-20240208-0008/",
"refsource": "MISC",
"url": "https://security.netapp.com/advisory/ntap-20240208-0008/"
}
]
}
},
"nvd.nist.gov": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*",
"matchCriteriaId": "23317443-1968-4791-9F20-AD3B308A83D1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*",
"matchCriteriaId": "23317443-1968-4791-9F20-AD3B308A83D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "934D4E46-12C1-41DC-A28C-A2C430E965E4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2F513002-D8C1-4D3A-9F79-4B52498F67E9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4D8DC08D-A860-493A-8AA6-1AD4A0A511AD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB4AE761-6FAC-4000-A63D-42CE3FAB8412",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D4793BFB-2E4E-4067-87A5-4B8749025CA3",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "42D329B2-432D-4029-87EB-4C3C5F55CD95",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
"matchCriteriaId": "821614DD-37DD-44E2-A8A4-FE8D23A33C3C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"matchCriteriaId": "734112B3-1383-4BE3-8721-C0F84566B764",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "36B0E40A-84EF-4099-A395-75D6B8CDA196",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
"matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*",
"matchCriteriaId": "23317443-1968-4791-9F20-AD3B308A83D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
"matchCriteriaId": "61019899-D7AF-46E4-A72C-D189180F66AB",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2E332666-2E03-468E-BC30-299816D6E8ED",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "2D3F18AF-84ED-473B-A8DF-65EB23C475AF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
"matchCriteriaId": "61019899-D7AF-46E4-A72C-D189180F66AB",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*",
"matchCriteriaId": "23317443-1968-4791-9F20-AD3B308A83D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "2D3F18AF-84ED-473B-A8DF-65EB23C475AF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2E332666-2E03-468E-BC30-299816D6E8ED",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2F513002-D8C1-4D3A-9F79-4B52498F67E9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4D8DC08D-A860-493A-8AA6-1AD4A0A511AD",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB4AE761-6FAC-4000-A63D-42CE3FAB8412",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
"matchCriteriaId": "821614DD-37DD-44E2-A8A4-FE8D23A33C3C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"descriptions": [
{
"lang": "en",
"value": ".NET Framework Denial of Service Vulnerability"
},
{
"lang": "es",
"value": "Vulnerabilidad de denegaci\u00f3n de servicio de .NET Framework"
}
],
"id": "CVE-2024-21312",
"lastModified": "2024-04-11T20:15:17.710",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "secure@microsoft.com",
"type": "Primary"
}
]
},
"published": "2024-01-09T18:15:55.080",
"references": [
{
"source": "secure@microsoft.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312"
},
{
"source": "secure@microsoft.com",
"url": "https://security.netapp.com/advisory/ntap-20240208-0008/"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "secure@microsoft.com",
"type": "Secondary"
}
]
}
}
}
}
MSRC_CVE-2024-21312
Vulnerability from csaf_microsoft - Published: 2024-01-09 08:00 - Updated: 2024-02-13 08:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.8 4.8.04690.02
Microsoft .NET Framework 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 4.8 4.8.04690.02
Microsoft .NET Framework 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 4.8 4.8.04690.02
Microsoft .NET Framework 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 4.8 4.8.04690.02
Microsoft .NET Framework 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 4.8 4.8.04690.02
Microsoft .NET Framework 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 4.8 4.8.04690.02
Microsoft .NET Framework 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 4.8 4.8.04690.02
Microsoft .NET Framework 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 4.8 4.8.04690.02
Microsoft .NET Framework 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
4.8.04690.02 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04081.03
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04081.03
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04081.03
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04081.03
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04081.03
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04081.03
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
4.7.04081.03 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
4.8.09214.01 | ||
|
Microsoft .NET Framework 3.5 3.0.50727.8976
Microsoft .NET Framework 3.5
|
3.0.50727.8976 | ||
|
Microsoft .NET Framework 3.5 3.0.50727.8976
Microsoft .NET Framework 3.5
|
3.0.50727.8976 | ||
|
Microsoft .NET Framework 3.5 3.0.50727.8976
Microsoft .NET Framework 3.5
|
3.0.50727.8976 | ||
|
Microsoft .NET Framework 3.5 3.0.50727.8976
Microsoft .NET Framework 3.5
|
3.0.50727.8976 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8.1 <4.8.09214.01
Microsoft .NET Framework 3.5 AND 4.8.1
|
<4.8.09214.01 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04081.03
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04081.03
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04081.03
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04081.03
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04081.03
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 <4.7.04081.03
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.7.2 <4.7.04081.03
Microsoft .NET Framework 3.5 AND 4.7.2
|
<4.7.04081.03 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 AND 4.8 <4.8.04690.02
Microsoft .NET Framework 3.5 AND 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.04690.02
Microsoft .NET Framework 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.04690.02
Microsoft .NET Framework 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.04690.02
Microsoft .NET Framework 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.04690.02
Microsoft .NET Framework 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.04690.02
Microsoft .NET Framework 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.04690.02
Microsoft .NET Framework 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.04690.02
Microsoft .NET Framework 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 4.8 <4.8.04690.02
Microsoft .NET Framework 4.8
|
<4.8.04690.02 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 <3.0.50727.8976
Microsoft .NET Framework 3.5
|
<3.0.50727.8976 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 <3.0.50727.8976
Microsoft .NET Framework 3.5
|
<3.0.50727.8976 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 <3.0.50727.8976
Microsoft .NET Framework 3.5
|
<3.0.50727.8976 |
Vendor Fix
fix
|
|
|
Microsoft .NET Framework 3.5 <3.0.50727.8976
Microsoft .NET Framework 3.5
|
<3.0.50727.8976 |
Vendor Fix
fix
|
{
"document": {
"acknowledgments": [
{
"names": [
"Karel Rymes"
]
}
],
"aggregate_severity": {
"namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
},
{
"category": "general",
"text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
"title": "Customer Action"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2024-21312 .NET Framework Denial of Service Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312"
},
{
"category": "self",
"summary": "CVE-2024-21312 .NET Framework Denial of Service Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2024/msrc_cve-2024-21312.json"
},
{
"category": "external",
"summary": "Microsoft Exploitability Index",
"url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": ".NET Framework Denial of Service Vulnerability",
"tracking": {
"current_release_date": "2024-02-13T08:00:00.000Z",
"generator": {
"date": "2025-05-03T01:46:23.043Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2024-21312",
"initial_release_date": "2024-01-09T08:00:00.000Z",
"revision_history": [
{
"date": "2024-01-09T08:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
},
{
"date": "2024-01-12T08:00:00.000Z",
"legacy_version": "1.1",
"number": "2",
"summary": "Corrected Download and Article links in the Security Updates table. This is an informational change only."
},
{
"date": "2024-01-22T08:00:00.000Z",
"legacy_version": "1.2",
"number": "3",
"summary": "Corrected Download links in the Security Updates table. This is an informational change only."
},
{
"date": "2024-02-13T08:00:00.000Z",
"legacy_version": "1.3",
"number": "4",
"summary": "To address a known issue with a broken link, corrected Download links in the Security Updates table. This is an informational change only."
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-12243"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "2"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-12242"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.04690.02",
"product_id": "44"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.04690.02",
"product_id": "11650-10852"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.04690.02",
"product_id": "45"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.04690.02",
"product_id": "11650-10853"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.04690.02",
"product_id": "46"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.04690.02",
"product_id": "11650-10816"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.04690.02",
"product_id": "47"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.04690.02",
"product_id": "11650-10855"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.04690.02",
"product_id": "48"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.04690.02",
"product_id": "11650-10378"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.04690.02",
"product_id": "49"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.04690.02",
"product_id": "11650-10379"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.04690.02",
"product_id": "50"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.04690.02",
"product_id": "11650-10483"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 \u003c4.8.04690.02",
"product_id": "51"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 4.8 4.8.04690.02",
"product_id": "11650-10543"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "30"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-11568"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "31"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-11569"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "32"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-11571"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "33"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-11572"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "34"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-11923"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "35"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-11924"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "36"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-11926"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "37"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-11927"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "38"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-11929"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "39"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-11930"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "40"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-11931"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "41"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-12097"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "42"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-12098"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 \u003c4.8.04690.02",
"product_id": "43"
}
},
{
"category": "product_version",
"name": "4.8.04690.02",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8 4.8.04690.02",
"product_id": "11676-12099"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c4.7.04081.03",
"product_id": "21"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03",
"product_id": "11677-11568"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c4.7.04081.03",
"product_id": "22"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03",
"product_id": "11677-11569"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c4.7.04081.03",
"product_id": "23"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03",
"product_id": "11677-11570"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c4.7.04081.03",
"product_id": "24"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03",
"product_id": "11677-11571"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c4.7.04081.03",
"product_id": "25"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03",
"product_id": "11677-11572"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c4.7.04081.03",
"product_id": "26"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03",
"product_id": "11677-10852"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c4.7.04081.03",
"product_id": "27"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03",
"product_id": "11677-10853"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c4.7.04081.03",
"product_id": "28"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03",
"product_id": "11677-10816"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 \u003c4.7.04081.03",
"product_id": "29"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.7.2 4.7.04081.03",
"product_id": "11677-10855"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.04081.03",
"product_id": "15"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04081.03",
"product_id": "11863-10051"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.04081.03",
"product_id": "16"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04081.03",
"product_id": "11863-10049"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.04081.03",
"product_id": "17"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04081.03",
"product_id": "11863-10378"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.04081.03",
"product_id": "18"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04081.03",
"product_id": "11863-10379"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.04081.03",
"product_id": "19"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04081.03",
"product_id": "11863-10483"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 \u003c4.7.04081.03",
"product_id": "20"
}
},
{
"category": "product_version",
"name": "4.7.04081.03",
"product": {
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 4.7.04081.03",
"product_id": "11863-10543"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "3"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-11923"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "4"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-11924"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "5"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-11926"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "6"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-11927"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "7"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-11929"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "8"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-11930"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "9"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-11931"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "10"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-12085"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "11"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-12086"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "12"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-12097"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "13"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-12098"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 \u003c4.8.09214.01",
"product_id": "14"
}
},
{
"category": "product_version",
"name": "4.8.09214.01",
"product": {
"name": "Microsoft .NET Framework 3.5 AND 4.8.1 4.8.09214.01",
"product_id": "12079-12099"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5 AND 4.8.1"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c3.0.50727.8976",
"product": {
"name": "Microsoft .NET Framework 3.5 \u003c3.0.50727.8976",
"product_id": "52"
}
},
{
"category": "product_version",
"name": "3.0.50727.8976",
"product": {
"name": "Microsoft .NET Framework 3.5 3.0.50727.8976",
"product_id": "2472-10378"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c3.0.50727.8976",
"product": {
"name": "Microsoft .NET Framework 3.5 \u003c3.0.50727.8976",
"product_id": "53"
}
},
{
"category": "product_version",
"name": "3.0.50727.8976",
"product": {
"name": "Microsoft .NET Framework 3.5 3.0.50727.8976",
"product_id": "2472-10379"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c3.0.50727.8976",
"product": {
"name": "Microsoft .NET Framework 3.5 \u003c3.0.50727.8976",
"product_id": "54"
}
},
{
"category": "product_version",
"name": "3.0.50727.8976",
"product": {
"name": "Microsoft .NET Framework 3.5 3.0.50727.8976",
"product_id": "2472-10483"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c3.0.50727.8976",
"product": {
"name": "Microsoft .NET Framework 3.5 \u003c3.0.50727.8976",
"product_id": "55"
}
},
{
"category": "product_version",
"name": "3.0.50727.8976",
"product": {
"name": "Microsoft .NET Framework 3.5 3.0.50727.8976",
"product_id": "2472-10543"
}
}
],
"category": "product_name",
"name": "Microsoft .NET Framework 3.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-21312",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "general",
"text": "Microsoft",
"title": "Assigning CNA"
},
{
"category": "faq",
"text": "The score is based on websites/apps that are configured to allow anonymous access without authentication. When multiple attack vectors can be used, we assign a score based on the scenario with the higher risk.",
"title": "According to the CVSS metric, the privileges required is none (PR:N). What does that mean for this vulnerability?"
}
],
"product_status": {
"fixed": [
"11650-10378",
"11650-10379",
"11650-10483",
"11650-10543",
"11650-10816",
"11650-10852",
"11650-10853",
"11650-10855",
"11676-11568",
"11676-11569",
"11676-11571",
"11676-11572",
"11676-11923",
"11676-11924",
"11676-11926",
"11676-11927",
"11676-11929",
"11676-11930",
"11676-11931",
"11676-12097",
"11676-12098",
"11676-12099",
"11677-10816",
"11677-10852",
"11677-10853",
"11677-10855",
"11677-11568",
"11677-11569",
"11677-11570",
"11677-11571",
"11677-11572",
"11863-10049",
"11863-10051",
"11863-10378",
"11863-10379",
"11863-10483",
"11863-10543",
"12079-11923",
"12079-11924",
"12079-11926",
"12079-11927",
"12079-11929",
"12079-11930",
"12079-11931",
"12079-12085",
"12079-12086",
"12079-12097",
"12079-12098",
"12079-12099",
"12079-12242",
"12079-12243",
"2472-10378",
"2472-10379",
"2472-10483",
"2472-10543"
],
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36",
"37",
"38",
"39",
"40",
"41",
"42",
"43",
"44",
"45",
"46",
"47",
"48",
"49",
"50",
"51",
"52",
"53",
"54",
"55"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-21312 .NET Framework Denial of Service Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312"
},
{
"category": "self",
"summary": "CVE-2024-21312 .NET Framework Denial of Service Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/advisories/2024/msrc_cve-2024-21312.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.8.09214.01:Security Update:https://support.microsoft.com/help/5033920",
"product_ids": [
"1",
"2",
"10",
"11"
],
"url": "https://support.microsoft.com/help/5033920"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.8.04690.02:Security Update:https://support.microsoft.com/help/5033910",
"product_ids": [
"44",
"45",
"46",
"47"
],
"url": "https://support.microsoft.com/help/5033910"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.8.04690.02:Monthly Rollup:https://support.microsoft.com/help/5034278",
"product_ids": [
"48",
"49"
],
"url": "https://support.microsoft.com/help/5034278"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.8.04690.02:Monthly Rollup:https://support.microsoft.com/help/5034279",
"product_ids": [
"50",
"51"
],
"url": "https://support.microsoft.com/help/5034279"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.8.04690.02:Security Update:https://support.microsoft.com/help/5034273",
"product_ids": [
"30",
"31",
"32",
"33"
],
"url": "https://support.microsoft.com/help/5034273"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.8.04690.02:Security Update:https://support.microsoft.com/help/5034272",
"product_ids": [
"34",
"35"
],
"url": "https://support.microsoft.com/help/5034272"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.8.04690.02:Security Update:https://support.microsoft.com/help/5034276",
"product_ids": [
"36",
"37"
],
"url": "https://support.microsoft.com/help/5034276"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.8.04690.02:Security Update:https://support.microsoft.com/help/5034274",
"product_ids": [
"38",
"39",
"40"
],
"url": "https://support.microsoft.com/help/5034274"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.8.04690.02:Security Update:https://support.microsoft.com/help/5034275",
"product_ids": [
"41",
"42",
"43"
],
"url": "https://support.microsoft.com/help/5034275"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.7.04081.03:Security Update:https://support.microsoft.com/help/5034273",
"product_ids": [
"21",
"22",
"23",
"24",
"25"
],
"url": "https://support.microsoft.com/help/5034273"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "10.0.14393.6614:Security Update:https://support.microsoft.com/help/5034119",
"product_ids": [
"26",
"27",
"28",
"29"
],
"url": "https://support.microsoft.com/help/5034119"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.7.04081.02:Security Only:https://support.microsoft.com/help/5034269",
"product_ids": [
"15",
"16"
],
"url": "https://support.microsoft.com/help/5034269"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.7.04081.03:Monthly Rollup:https://support.microsoft.com/help/5034278",
"product_ids": [
"17",
"18"
],
"url": "https://support.microsoft.com/help/5034278"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "3.0.50727.8976:Monthly Rollup:https://support.microsoft.com/help/5034279",
"product_ids": [
"19",
"20",
"54",
"55"
],
"url": "https://support.microsoft.com/help/5034279"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.8.09214.01:Security Update:https://support.microsoft.com/help/5034272",
"product_ids": [
"3",
"4"
],
"url": "https://support.microsoft.com/help/5034272"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.8.09214.01:Security Update:https://support.microsoft.com/help/5034276",
"product_ids": [
"5",
"6"
],
"url": "https://support.microsoft.com/help/5034276"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.8.09214.01:Security Update:https://support.microsoft.com/help/5034274",
"product_ids": [
"7",
"8",
"9"
],
"url": "https://support.microsoft.com/help/5034274"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "4.8.09214.01:Security Update:https://support.microsoft.com/help/5034275",
"product_ids": [
"12",
"13",
"14"
],
"url": "https://support.microsoft.com/help/5034275"
},
{
"category": "vendor_fix",
"date": "2024-01-09T08:00:00.000Z",
"details": "3.0.50727.8976:Monthly Rollup:https://support.microsoft.com/help/5034278",
"product_ids": [
"52",
"53"
],
"url": "https://support.microsoft.com/help/5034278"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalsScore": 0.0,
"exploitCodeMaturity": "PROOF_OF_CONCEPT",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 6.7,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36",
"37",
"38",
"39",
"40",
"41",
"42",
"43",
"44",
"45",
"46",
"47",
"48",
"49",
"50",
"51",
"52",
"53",
"54",
"55"
]
}
],
"threats": [
{
"category": "impact",
"details": "Denial of Service"
},
{
"category": "exploit_status",
"details": "Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"
}
],
"title": ".NET Framework Denial of Service Vulnerability"
}
]
}
WID-SEC-W-2024-0039
Vulnerability from csaf_certbund - Published: 2024-01-09 23:00 - Updated: 2024-02-25 23:00Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines bösartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell präparierten X.509-Zertifikats, das absichtlich einen Fehler im Build einführt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erhöhte Rechte.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.7.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.1
|
4.7.1 | |
|
Microsoft .NET Framework 4.7.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.2
|
4.7.2 | |
|
Microsoft .NET Framework 7.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:7.0
|
7 | |
|
Microsoft .NET Framework 4.7
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7
|
4.7 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft .NET Framework 4.8
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8
|
4.8 | |
|
Microsoft Visual Studio 2015 Update 3
Microsoft / Visual Studio 2015
|
cpe:/a:microsoft:visual_studio_2015:update_3
|
Update 3 | |
|
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft / Visual Studio 2017
|
version 15.9 (includes 15.0 - 15.8) | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft .NET Framework 3.5
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.5:-
|
3.5 | |
|
Microsoft .NET Framework 6.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:6.0
|
6 | |
|
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft / Visual Studio 2019
|
version 16.11 (includes 16.0 - 16.10) | ||
|
Microsoft .NET Framework 4.8.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8.1
|
4.8.1 | |
|
Microsoft .NET Framework 2.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:2.0_sp2
|
2.0 SP2 | |
|
Microsoft Visual Studio 2022 version 17.8
Microsoft / Visual Studio 2022
|
version 17.8 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Microsoft .NET Framework 3.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.0_sp2
|
3.0 SP2 | |
|
Hitachi Storage
Hitachi
|
cpe:/h:hitachi:storage:-
|
— | |
|
Microsoft Visual Studio 2022 version 17.6
Microsoft / Visual Studio 2022
|
version 17.6 | ||
|
Microsoft .NET Framework 8.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:8.0
|
8 | |
|
Microsoft Visual Studio 2022 version 17.4
Microsoft / Visual Studio 2022
|
version 17.4 | ||
|
Microsoft .NET Framework 4.6.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.6.2
|
4.6.2 | |
|
Microsoft Visual Studio 2022 version 17.2
Microsoft / Visual Studio 2022
|
version 17.2 |
Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines bösartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell präparierten X.509-Zertifikats, das absichtlich einen Fehler im Build einführt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erhöhte Rechte.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.7.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.1
|
4.7.1 | |
|
Microsoft .NET Framework 4.7.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.2
|
4.7.2 | |
|
Microsoft .NET Framework 7.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:7.0
|
7 | |
|
Microsoft .NET Framework 4.7
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7
|
4.7 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft .NET Framework 4.8
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8
|
4.8 | |
|
Microsoft Visual Studio 2015 Update 3
Microsoft / Visual Studio 2015
|
cpe:/a:microsoft:visual_studio_2015:update_3
|
Update 3 | |
|
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft / Visual Studio 2017
|
version 15.9 (includes 15.0 - 15.8) | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft .NET Framework 3.5
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.5:-
|
3.5 | |
|
Microsoft .NET Framework 6.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:6.0
|
6 | |
|
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft / Visual Studio 2019
|
version 16.11 (includes 16.0 - 16.10) | ||
|
Microsoft .NET Framework 4.8.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8.1
|
4.8.1 | |
|
Microsoft .NET Framework 2.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:2.0_sp2
|
2.0 SP2 | |
|
Microsoft Visual Studio 2022 version 17.8
Microsoft / Visual Studio 2022
|
version 17.8 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Microsoft .NET Framework 3.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.0_sp2
|
3.0 SP2 | |
|
Hitachi Storage
Hitachi
|
cpe:/h:hitachi:storage:-
|
— | |
|
Microsoft Visual Studio 2022 version 17.6
Microsoft / Visual Studio 2022
|
version 17.6 | ||
|
Microsoft .NET Framework 8.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:8.0
|
8 | |
|
Microsoft Visual Studio 2022 version 17.4
Microsoft / Visual Studio 2022
|
version 17.4 | ||
|
Microsoft .NET Framework 4.6.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.6.2
|
4.6.2 | |
|
Microsoft Visual Studio 2022 version 17.2
Microsoft / Visual Studio 2022
|
version 17.2 |
Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines bösartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell präparierten X.509-Zertifikats, das absichtlich einen Fehler im Build einführt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erhöhte Rechte.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.7.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.1
|
4.7.1 | |
|
Microsoft .NET Framework 4.7.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.2
|
4.7.2 | |
|
Microsoft .NET Framework 7.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:7.0
|
7 | |
|
Microsoft .NET Framework 4.7
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7
|
4.7 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft .NET Framework 4.8
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8
|
4.8 | |
|
Microsoft Visual Studio 2015 Update 3
Microsoft / Visual Studio 2015
|
cpe:/a:microsoft:visual_studio_2015:update_3
|
Update 3 | |
|
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft / Visual Studio 2017
|
version 15.9 (includes 15.0 - 15.8) | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft .NET Framework 3.5
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.5:-
|
3.5 | |
|
Microsoft .NET Framework 6.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:6.0
|
6 | |
|
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft / Visual Studio 2019
|
version 16.11 (includes 16.0 - 16.10) | ||
|
Microsoft .NET Framework 4.8.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8.1
|
4.8.1 | |
|
Microsoft .NET Framework 2.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:2.0_sp2
|
2.0 SP2 | |
|
Microsoft Visual Studio 2022 version 17.8
Microsoft / Visual Studio 2022
|
version 17.8 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Microsoft .NET Framework 3.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.0_sp2
|
3.0 SP2 | |
|
Hitachi Storage
Hitachi
|
cpe:/h:hitachi:storage:-
|
— | |
|
Microsoft Visual Studio 2022 version 17.6
Microsoft / Visual Studio 2022
|
version 17.6 | ||
|
Microsoft .NET Framework 8.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:8.0
|
8 | |
|
Microsoft Visual Studio 2022 version 17.4
Microsoft / Visual Studio 2022
|
version 17.4 | ||
|
Microsoft .NET Framework 4.6.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.6.2
|
4.6.2 | |
|
Microsoft Visual Studio 2022 version 17.2
Microsoft / Visual Studio 2022
|
version 17.2 |
Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines bösartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell präparierten X.509-Zertifikats, das absichtlich einen Fehler im Build einführt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erhöhte Rechte.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.7.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.1
|
4.7.1 | |
|
Microsoft .NET Framework 4.7.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.2
|
4.7.2 | |
|
Microsoft .NET Framework 7.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:7.0
|
7 | |
|
Microsoft .NET Framework 4.7
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7
|
4.7 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft .NET Framework 4.8
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8
|
4.8 | |
|
Microsoft Visual Studio 2015 Update 3
Microsoft / Visual Studio 2015
|
cpe:/a:microsoft:visual_studio_2015:update_3
|
Update 3 | |
|
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft / Visual Studio 2017
|
version 15.9 (includes 15.0 - 15.8) | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft .NET Framework 3.5
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.5:-
|
3.5 | |
|
Microsoft .NET Framework 6.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:6.0
|
6 | |
|
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft / Visual Studio 2019
|
version 16.11 (includes 16.0 - 16.10) | ||
|
Microsoft .NET Framework 4.8.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8.1
|
4.8.1 | |
|
Microsoft .NET Framework 2.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:2.0_sp2
|
2.0 SP2 | |
|
Microsoft Visual Studio 2022 version 17.8
Microsoft / Visual Studio 2022
|
version 17.8 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Microsoft .NET Framework 3.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.0_sp2
|
3.0 SP2 | |
|
Hitachi Storage
Hitachi
|
cpe:/h:hitachi:storage:-
|
— | |
|
Microsoft Visual Studio 2022 version 17.6
Microsoft / Visual Studio 2022
|
version 17.6 | ||
|
Microsoft .NET Framework 8.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:8.0
|
8 | |
|
Microsoft Visual Studio 2022 version 17.4
Microsoft / Visual Studio 2022
|
version 17.4 | ||
|
Microsoft .NET Framework 4.6.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.6.2
|
4.6.2 | |
|
Microsoft Visual Studio 2022 version 17.2
Microsoft / Visual Studio 2022
|
version 17.2 |
Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines bösartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell präparierten X.509-Zertifikats, das absichtlich einen Fehler im Build einführt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erhöhte Rechte.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.7.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.1
|
4.7.1 | |
|
Microsoft .NET Framework 4.7.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.2
|
4.7.2 | |
|
Microsoft .NET Framework 7.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:7.0
|
7 | |
|
Microsoft .NET Framework 4.7
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7
|
4.7 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft .NET Framework 4.8
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8
|
4.8 | |
|
Microsoft Visual Studio 2015 Update 3
Microsoft / Visual Studio 2015
|
cpe:/a:microsoft:visual_studio_2015:update_3
|
Update 3 | |
|
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft / Visual Studio 2017
|
version 15.9 (includes 15.0 - 15.8) | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft .NET Framework 3.5
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.5:-
|
3.5 | |
|
Microsoft .NET Framework 6.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:6.0
|
6 | |
|
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft / Visual Studio 2019
|
version 16.11 (includes 16.0 - 16.10) | ||
|
Microsoft .NET Framework 4.8.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8.1
|
4.8.1 | |
|
Microsoft .NET Framework 2.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:2.0_sp2
|
2.0 SP2 | |
|
Microsoft Visual Studio 2022 version 17.8
Microsoft / Visual Studio 2022
|
version 17.8 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Microsoft .NET Framework 3.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.0_sp2
|
3.0 SP2 | |
|
Hitachi Storage
Hitachi
|
cpe:/h:hitachi:storage:-
|
— | |
|
Microsoft Visual Studio 2022 version 17.6
Microsoft / Visual Studio 2022
|
version 17.6 | ||
|
Microsoft .NET Framework 8.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:8.0
|
8 | |
|
Microsoft Visual Studio 2022 version 17.4
Microsoft / Visual Studio 2022
|
version 17.4 | ||
|
Microsoft .NET Framework 4.6.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.6.2
|
4.6.2 | |
|
Microsoft Visual Studio 2022 version 17.2
Microsoft / Visual Studio 2022
|
version 17.2 |
Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines bösartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell präparierten X.509-Zertifikats, das absichtlich einen Fehler im Build einführt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erhöhte Rechte.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Microsoft .NET Framework 4.7.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.1
|
4.7.1 | |
|
Microsoft .NET Framework 4.7.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7.2
|
4.7.2 | |
|
Microsoft .NET Framework 7.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:7.0
|
7 | |
|
Microsoft .NET Framework 4.7
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.7
|
4.7 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Microsoft .NET Framework 4.8
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8
|
4.8 | |
|
Microsoft Visual Studio 2015 Update 3
Microsoft / Visual Studio 2015
|
cpe:/a:microsoft:visual_studio_2015:update_3
|
Update 3 | |
|
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft / Visual Studio 2017
|
version 15.9 (includes 15.0 - 15.8) | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Microsoft .NET Framework 3.5
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.5:-
|
3.5 | |
|
Microsoft .NET Framework 6.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:6.0
|
6 | |
|
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft / Visual Studio 2019
|
version 16.11 (includes 16.0 - 16.10) | ||
|
Microsoft .NET Framework 4.8.1
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.8.1
|
4.8.1 | |
|
Microsoft .NET Framework 2.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:2.0_sp2
|
2.0 SP2 | |
|
Microsoft Visual Studio 2022 version 17.8
Microsoft / Visual Studio 2022
|
version 17.8 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Microsoft .NET Framework 3.0 SP2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:3.0_sp2
|
3.0 SP2 | |
|
Hitachi Storage
Hitachi
|
cpe:/h:hitachi:storage:-
|
— | |
|
Microsoft Visual Studio 2022 version 17.6
Microsoft / Visual Studio 2022
|
version 17.6 | ||
|
Microsoft .NET Framework 8.0
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:8.0
|
8 | |
|
Microsoft Visual Studio 2022 version 17.4
Microsoft / Visual Studio 2022
|
version 17.4 | ||
|
Microsoft .NET Framework 4.6.2
Microsoft / .NET Framework
|
cpe:/a:microsoft:.net_framework:4.6.2
|
4.6.2 | |
|
Microsoft Visual Studio 2022 version 17.2
Microsoft / Visual Studio 2022
|
version 17.2 |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Microsoft .NET Framework ist eine Komponente des Microsoft Windows-Betriebssystems, das die Erstellung und Ausf\u00fchrung von Softwareanwendungen und Webdiensten erm\u00f6glicht. Es beinhaltet sowohl eine Laufzeitumgebung als auch ein Framework von Klassenbibliotheken (APIs), u. a. f\u00fcr die Programmiersprache ASP (ASP.NET), den Datenzugriff (ADO.NET), intelligente Clientanwendungen (Windows Forms) und weitere.\r\nMicrosoft Visual Studio ist eine integrierte Entwicklungsumgebung f\u00fcr Hochsprachen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft Developer Tools ausnutzen, um seine Privilegien zu erh\u00f6hen, einen Denial of Service Zustand hervorzurufen oder Sicherheitsma\u00dfnahmen zu umgehen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-0039 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0039.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-0039 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0039"
},
{
"category": "external",
"summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates vom 2024-01-09",
"url": "https://msrc.microsoft.com/update-guide"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0158 vom 2024-01-11",
"url": "https://access.redhat.com/errata/RHSA-2024:0158"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0150 vom 2024-01-11",
"url": "https://access.redhat.com/errata/RHSA-2024:0150"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0157 vom 2024-01-11",
"url": "https://access.redhat.com/errata/RHSA-2024:0157"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0151 vom 2024-01-11",
"url": "https://access.redhat.com/errata/RHSA-2024:0151"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0152 vom 2024-01-11",
"url": "https://access.redhat.com/errata/RHSA-2024:0152"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0156 vom 2024-01-11",
"url": "https://access.redhat.com/errata/RHSA-2024:0156"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-6578-1 vom 2024-01-11",
"url": "https://ubuntu.com/security/notices/USN-6578-1"
},
{
"category": "external",
"summary": "MDSec Research vom 2024-01-11",
"url": "https://www.mdsec.co.uk/2024/01/cve-2024-20656-local-privilege-escalation-in-vsstandardcollectorservice150-service/"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-0156 vom 2024-01-13",
"url": "http://linux.oracle.com/errata/ELSA-2024-0156.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2024:0255 vom 2024-01-16",
"url": "https://access.redhat.com/errata/RHSA-2024:0255"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-0151 vom 2024-01-17",
"url": "https://linux.oracle.com/errata/ELSA-2024-0151.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-0152 vom 2024-01-17",
"url": "https://linux.oracle.com/errata/ELSA-2024-0152.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-0157 vom 2024-01-18",
"url": "https://linux.oracle.com/errata/ELSA-2024-0157.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-0158 vom 2024-01-19",
"url": "http://linux.oracle.com/errata/ELSA-2024-0158.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-0150 vom 2024-02-21",
"url": "https://linux.oracle.com/errata/ELSA-2024-0150.html"
},
{
"category": "external",
"summary": "Hitachi Vulnerability Information HITACHI-SEC-2024-301 vom 2024-02-26",
"url": "https://www.hitachi.com/products/it/storage-solutions/sec_info/2024/01.html"
}
],
"source_lang": "en-US",
"title": "Microsoft Developer Tools: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-02-25T23:00:00.000+00:00",
"generator": {
"date": "2024-08-15T18:03:25.029+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2024-0039",
"initial_release_date": "2024-01-09T23:00:00.000+00:00",
"revision_history": [
{
"date": "2024-01-09T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2024-01-10T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-01-11T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-01-14T23:00:00.000+00:00",
"number": "4",
"summary": "PoC aufgenommen"
},
{
"date": "2024-01-15T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2024-01-17T23:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-01-18T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-02-20T23:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-02-25T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von HITACHI aufgenommen"
}
],
"status": "final",
"version": "9"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Hitachi Storage",
"product": {
"name": "Hitachi Storage",
"product_id": "T009295",
"product_identification_helper": {
"cpe": "cpe:/h:hitachi:storage:-"
}
}
}
],
"category": "vendor",
"name": "Hitachi"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "4.8.1",
"product": {
"name": "Microsoft .NET Framework 4.8.1",
"product_id": "1273212",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:4.8.1"
}
}
},
{
"category": "product_version",
"name": "4.7",
"product": {
"name": "Microsoft .NET Framework 4.7",
"product_id": "432554",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:4.7"
}
}
},
{
"category": "product_version",
"name": "4.7.1",
"product": {
"name": "Microsoft .NET Framework 4.7.1",
"product_id": "432555",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:4.7.1"
}
}
},
{
"category": "product_version",
"name": "4.7.2",
"product": {
"name": "Microsoft .NET Framework 4.7.2",
"product_id": "432556",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:4.7.2"
}
}
},
{
"category": "product_version",
"name": "4.8",
"product": {
"name": "Microsoft .NET Framework 4.8",
"product_id": "432557",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:4.8"
}
}
},
{
"category": "product_version",
"name": "3.5",
"product": {
"name": "Microsoft .NET Framework 3.5",
"product_id": "834793",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:3.5:-"
}
}
},
{
"category": "product_version",
"name": "2.0 SP2",
"product": {
"name": "Microsoft .NET Framework 2.0 SP2",
"product_id": "T021515",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:2.0_sp2"
}
}
},
{
"category": "product_version",
"name": "6",
"product": {
"name": "Microsoft .NET Framework 6.0",
"product_id": "T021995",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:6.0"
}
}
},
{
"category": "product_version",
"name": "3.0 SP2",
"product": {
"name": "Microsoft .NET Framework 3.0 SP2",
"product_id": "T024564",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:3.0_sp2"
}
}
},
{
"category": "product_version",
"name": "7",
"product": {
"name": "Microsoft .NET Framework 7.0",
"product_id": "T029132",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:7.0"
}
}
},
{
"category": "product_version",
"name": "4.6.2",
"product": {
"name": "Microsoft .NET Framework 4.6.2",
"product_id": "T031928",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:4.6.2"
}
}
},
{
"category": "product_version",
"name": "8",
"product": {
"name": "Microsoft .NET Framework 8.0",
"product_id": "T031969",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:.net_framework:8.0"
}
}
}
],
"category": "product_name",
"name": ".NET Framework"
},
{
"branches": [
{
"category": "product_version",
"name": "Update 3",
"product": {
"name": "Microsoft Visual Studio 2015 Update 3",
"product_id": "T014511",
"product_identification_helper": {
"cpe": "cpe:/a:microsoft:visual_studio_2015:update_3"
}
}
}
],
"category": "product_name",
"name": "Visual Studio 2015"
},
{
"branches": [
{
"category": "product_version_range",
"name": "version 15.9 (includes 15.0 - 15.8)",
"product": {
"name": "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)",
"product_id": "T015502"
}
}
],
"category": "product_name",
"name": "Visual Studio 2017"
},
{
"branches": [
{
"category": "product_version_range",
"name": "version 16.11 (includes 16.0 - 16.10)",
"product": {
"name": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
"product_id": "T020376"
}
}
],
"category": "product_name",
"name": "Visual Studio 2019"
},
{
"branches": [
{
"category": "product_version_range",
"name": "version 17.2",
"product": {
"name": "Microsoft Visual Studio 2022 version 17.2",
"product_id": "T028102"
}
},
{
"category": "product_version_range",
"name": "version 17.4",
"product": {
"name": "Microsoft Visual Studio 2022 version 17.4",
"product_id": "T028103"
}
},
{
"category": "product_version_range",
"name": "version 17.6",
"product": {
"name": "Microsoft Visual Studio 2022 version 17.6",
"product_id": "T028105"
}
},
{
"category": "product_version_range",
"name": "version 17.8",
"product": {
"name": "Microsoft Visual Studio 2022 version 17.8",
"product_id": "T029805"
}
}
],
"category": "product_name",
"name": "Visual Studio 2022"
}
],
"category": "vendor",
"name": "Microsoft"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-21319",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines b\u00f6sartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell pr\u00e4parierten X.509-Zertifikats, das absichtlich einen Fehler im Build einf\u00fchrt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"432555",
"432556",
"T029132",
"432554",
"67646",
"432557",
"T014511",
"T015502",
"T004914",
"834793",
"T021995",
"T020376",
"1273212",
"T021515",
"T029805",
"T000126",
"T024564",
"T009295",
"T028105",
"T031969",
"T028103",
"T031928",
"T028102"
]
},
"release_date": "2024-01-09T23:00:00.000+00:00",
"title": "CVE-2024-21319"
},
{
"cve": "CVE-2024-21312",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines b\u00f6sartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell pr\u00e4parierten X.509-Zertifikats, das absichtlich einen Fehler im Build einf\u00fchrt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"432555",
"432556",
"T029132",
"432554",
"67646",
"432557",
"T014511",
"T015502",
"T004914",
"834793",
"T021995",
"T020376",
"1273212",
"T021515",
"T029805",
"T000126",
"T024564",
"T009295",
"T028105",
"T031969",
"T028103",
"T031928",
"T028102"
]
},
"release_date": "2024-01-09T23:00:00.000+00:00",
"title": "CVE-2024-21312"
},
{
"cve": "CVE-2024-20672",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines b\u00f6sartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell pr\u00e4parierten X.509-Zertifikats, das absichtlich einen Fehler im Build einf\u00fchrt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"432555",
"432556",
"T029132",
"432554",
"67646",
"432557",
"T014511",
"T015502",
"T004914",
"834793",
"T021995",
"T020376",
"1273212",
"T021515",
"T029805",
"T000126",
"T024564",
"T009295",
"T028105",
"T031969",
"T028103",
"T031928",
"T028102"
]
},
"release_date": "2024-01-09T23:00:00.000+00:00",
"title": "CVE-2024-20672"
},
{
"cve": "CVE-2024-20656",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines b\u00f6sartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell pr\u00e4parierten X.509-Zertifikats, das absichtlich einen Fehler im Build einf\u00fchrt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"432555",
"432556",
"T029132",
"432554",
"67646",
"432557",
"T014511",
"T015502",
"T004914",
"834793",
"T021995",
"T020376",
"1273212",
"T021515",
"T029805",
"T000126",
"T024564",
"T009295",
"T028105",
"T031969",
"T028103",
"T031928",
"T028102"
]
},
"release_date": "2024-01-09T23:00:00.000+00:00",
"title": "CVE-2024-20656"
},
{
"cve": "CVE-2024-0057",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines b\u00f6sartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell pr\u00e4parierten X.509-Zertifikats, das absichtlich einen Fehler im Build einf\u00fchrt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"432555",
"432556",
"T029132",
"432554",
"67646",
"432557",
"T014511",
"T015502",
"T004914",
"834793",
"T021995",
"T020376",
"1273212",
"T021515",
"T029805",
"T000126",
"T024564",
"T009295",
"T028105",
"T031969",
"T028103",
"T031928",
"T028102"
]
},
"release_date": "2024-01-09T23:00:00.000+00:00",
"title": "CVE-2024-0057"
},
{
"cve": "CVE-2024-0056",
"notes": [
{
"category": "description",
"text": "Es existieren mehrere Schwachstellen in den Microsoft Developer Tools. Die Fehler bestehen aufgrund der Verwendung eines b\u00f6sartigen JSON Web Encryption (JWE)-Tokens mit einer hohen Komprimierungsrate, der Verwendung eines speziell pr\u00e4parierten X.509-Zertifikats, das absichtlich einen Fehler im Build einf\u00fchrt oder verursacht, eines Machine-in-the-Middle (MITM)-Angriffs und anderer Schwachstellen, die noch nicht im Detail beschrieben sind. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsma\u00dfnahmen zu umgehen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
}
],
"product_status": {
"known_affected": [
"432555",
"432556",
"T029132",
"432554",
"67646",
"432557",
"T014511",
"T015502",
"T004914",
"834793",
"T021995",
"T020376",
"1273212",
"T021515",
"T029805",
"T000126",
"T024564",
"T009295",
"T028105",
"T031969",
"T028103",
"T031928",
"T028102"
]
},
"release_date": "2024-01-09T23:00:00.000+00:00",
"title": "CVE-2024-0056"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.