CVE-2024-30105
.NET and Visual Studio Denial of Service Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
.NET Core and Visual Studio Denial of Service Vulnerability
Vulnerabilidad de denegaciĆ³n de servicio en .NET Core y Visual Studio
.NET and Visual Studio Denial of Service Vulnerability
A vulnerability was found in .NET. This issue can cause a denial of service in the System.Text.Json deserialization.
It was discovered that .NET did not properly handle object deserialization. An attacker could possibly use this issue to cause a denial of service. Radek Zikmund discovered that .NET did not properly manage memory. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. It was discovered that .NET did not properly parse X.509 Content and ObjectIdentifiers. An attacker could possibly use this issue to cause a denial of service.
CVSS Scores
SSVC
- Decision:Attend
Timeline
- 2024-03-22 CVE Reserved
- 2024-07-09 CVE Published
- 2025-03-11 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-400: Uncontrolled Resource Consumption
CAPEC
References (3)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30105 | 2024-07-19 |
URL | Date | SRC |
---|---|---|
https://access.redhat.com/security/cve/CVE-2024-30105 | 2024-07-10 | |
https://bugzilla.redhat.com/show_bug.cgi?id=2295320 | 2024-07-10 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Microsoft Search vendor "Microsoft" | .net Search vendor "Microsoft" for product ".net" | >= 8.0.0 <= 8.0.7 Search vendor "Microsoft" for product ".net" and version " >= 8.0.0 <= 8.0.7" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Visual Studio 2022 Search vendor "Microsoft" for product "Visual Studio 2022" | >= 17.4.0 < 17.4.21 Search vendor "Microsoft" for product "Visual Studio 2022" and version " >= 17.4.0 < 17.4.21" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Visual Studio 2022 Search vendor "Microsoft" for product "Visual Studio 2022" | >= 17.6.0 < 17.6.17 Search vendor "Microsoft" for product "Visual Studio 2022" and version " >= 17.6.0 < 17.6.17" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Visual Studio 2022 Search vendor "Microsoft" for product "Visual Studio 2022" | >= 17.8.0 <= 17.8.12 Search vendor "Microsoft" for product "Visual Studio 2022" and version " >= 17.8.0 <= 17.8.12" | - |
Affected
| ||||||
Microsoft Search vendor "Microsoft" | Visual Studio 2022 Search vendor "Microsoft" for product "Visual Studio 2022" | >= 17.10.0 <= 17.10.4 Search vendor "Microsoft" for product "Visual Studio 2022" and version " >= 17.10.0 <= 17.10.4" | - |
Affected
|