PT-2024-1914 · Microsoft+8 · .Net Framework+8

Bahaa Naamneh · Published 2024-02-13 · Updated 2024-12-13 · CVE-2024-21404

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions .NET versions (affected versions not specified)

Description The issue is related to pointer dereference errors in the Microsoft .NET platform. Exploitation of this issue can allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2024:0805

ALSA-2024:0806

ALSA-2024:0807

ALSA-2024:0808

ALSA-2024:0827

ALSA-2024:0848

ALT-PU-2024-13117

ALT-PU-2024-13118

ALT-PU-2024-16742

ALT-PU-2024-16744

ALT-PU-2024-16792

ALT-PU-2024-16794

ALT-PU-2024-16796

ALT-PU-2024-16939

ALT-PU-2024-2554

ALT-PU-2024-2556

ALT-PU-2024-2557

ALT-PU-2024-5998

ALT-PU-2024-6034

BDU:2024-01702

BIT-ASPNET-CORE-2024-21404

CESA-2024_0806

CESA-2024_0808

CESA-2024_0827

CESA-2024_3340

CVE-2024-21404

RHSA-2024:0805

RHSA-2024:0806

RHSA-2024:0807

RHSA-2024:0808

RHSA-2024:0814

RHSA-2024:0827

RHSA-2024:0848

RHSA-2024:1552

RHSA-2024:1553

RHSA-2024:1554

RHSA-2024:1555

RHSA-2024:1641

RHSA-2024:1643

RHSA-2024:2843

RHSA-2024:3340

RHSA-2024_0805

RHSA-2024_0806

RHSA-2024_0807

RHSA-2024_0808

RHSA-2024_0827

RHSA-2024_0848

RHSA-2024_2843

RHSA-2024_3340

RLSA-2024:0806

RLSA-2024:0827

USN-6634-1

Affected Products

.Net Framework

Alt Linux

Almalinux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Ubuntu

References · 56

• 🔥 https://github.com/bcdannyboy/CVE-2023-44487 · Exploit
• 🔥 https://github.com/imabee101/CVE-2023-44487 · Exploit
• 🔥 https://github.com/studiogangster/CVE-2023-44487 · Exploit
• 🔥 https://github.com/nxenon/cve-2023-44487 · Exploit
• https://ubuntu.com/security/CVE-2024-21404 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:0805 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-21386 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-0807.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-0848.html · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-0827.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:0827 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6634-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:0827 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:0807 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-0808.html · Vendor Advisory