PT-2024-1913 · Microsoft+8 · .Net Framework+8

Brennan Conroy · Published 2024-02-13 · Updated 2024-12-13 · CVE-2024-21386

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft .NET (affected versions not specified)

Description The issue is related to pointer dereference errors in the Microsoft .NET platform. It can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

NULL Pointer Dereference

Weakness Enumeration

CWE-400

CWE-476

Related Identifiers

ALSA-2024:0805

ALSA-2024:0806

ALSA-2024:0807

ALSA-2024:0808

ALSA-2024:0827

ALSA-2024:0848

ALT-PU-2024-13117

ALT-PU-2024-13118

ALT-PU-2024-16742

ALT-PU-2024-16744

ALT-PU-2024-16792

ALT-PU-2024-16794

ALT-PU-2024-16796

ALT-PU-2024-16939

ALT-PU-2024-2554

ALT-PU-2024-2556

ALT-PU-2024-2557

ALT-PU-2024-5998

ALT-PU-2024-6034

BDU:2024-01701

BIT-ASPNET-CORE-2024-21386

CESA-2024_0806

CESA-2024_0808

CESA-2024_0827

CESA-2024_3340

CVE-2024-21386

GHSA-32Q7-GV7F-4CG5

GHSA-G74Q-5XW3-J7Q9

RHSA-2024:0805

RHSA-2024:0806

RHSA-2024:0807

RHSA-2024:0808

RHSA-2024:0814

RHSA-2024:0827

RHSA-2024:0848

RHSA-2024:2843

RHSA-2024:3340

RHSA-2024_0805

RHSA-2024_0806

RHSA-2024_0807

RHSA-2024_0808

RHSA-2024_0827

RHSA-2024_0848

RHSA-2024_2843

RHSA-2024_3340

RLSA-2024:0806

RLSA-2024:0827

USN-6634-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

.Net Framework

Red Hat

Red Os

Rocky Linux

Ubuntu

References · 59

• 🔥 https://github.com/bcdannyboy/CVE-2023-44487 · Exploit
• 🔥 https://github.com/imabee101/CVE-2023-44487 · Exploit
• 🔥 https://github.com/studiogangster/CVE-2023-44487 · Exploit
• 🔥 https://github.com/nxenon/cve-2023-44487 · Exploit
• https://osv.dev/vulnerability/ALSA-2024:0848 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-0807.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-0806.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-21386 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:0805 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01701 · Security Note
• https://linux.oracle.com/errata/ELSA-2024-0827.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-0848.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:0808 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21386 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6634-1 · Vendor Advisory