PT-2024-2084 · Microsoft+7 · Visual Studio+8

Published 2024-03-12 · Updated 2025-09-04 · CVE-2024-21392

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions .NET and Visual Studio (affected versions not specified)

Description The issue exists due to insufficient input validation in the software development tool Microsoft Visual Studio and the .NET platform. Exploitation of this issue may allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

RCE

Weakness Enumeration

CWE-400

CWE-20

Related Identifiers

ALSA-2024:1308

ALSA-2024:1309

ALSA-2024:1310

ALSA-2024:1311

ALT-PU-2024-13115

ALT-PU-2024-13117

ALT-PU-2024-13118

ALT-PU-2024-16796

ALT-PU-2024-16799

ALT-PU-2024-16939

ALT-PU-2024-5924

ALT-PU-2024-5998

ALT-PU-2024-6034

BDU:2024-01980

BIT-DOTNET-2024-21392

BIT-DOTNET-SDK-2024-21392

BIT-POWERSHELL-2024-21392

CESA-2024_1308

CESA-2024_1311

CVE-2024-21392

GHSA-5FXJ-WHCV-CRRC

RHSA-2024:1308

RHSA-2024:1309

RHSA-2024:1310

RHSA-2024:1311

RHSA-2024_1308

RHSA-2024_1309

RHSA-2024_1310

RHSA-2024_1311

RLSA-2024:1308

RLSA-2024:1311

USN-6693-1

Affected Products

.Net Framework

Alt Linux

Almalinux

Centos

Linuxmint

Red Hat

Rocky Linux

Ubuntu

Visual Studio

References · 51

• https://ubuntu.com/security/CVE-2024-21392 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21392 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:1308 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-1310.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01980 · Security Note
• https://osv.dev/vulnerability/BIT-dotnet-2024-21392 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-1308.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:1311 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6693-1 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-1310.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-1309.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-21392 · Security Note
• https://osv.dev/vulnerability/ALSA-2024:1310 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-powershell-2024-21392 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:1308 · Vendor Advisory