PT-2024-3642 · Microsoft+7 · .Net Framework+8

Published 2024-05-14 · Updated 2025-01-08 · CVE-2024-30046

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio (affected versions not specified) Microsoft .NET (affected versions not specified)

Description The issue is caused by synchronization errors when using a shared resource. It may allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALSA-2024:2842

ALSA-2024:2843

ALSA-2024:3340

ALSA-2024:3345

ALT-PU-2024-12834

ALT-PU-2024-12835

ALT-PU-2024-12836

ALT-PU-2024-12837

ALT-PU-2024-13115

ALT-PU-2024-13117

ALT-PU-2024-13118

ALT-PU-2024-13119

ALT-PU-2024-16796

ALT-PU-2024-16799

ALT-PU-2024-16800

ALT-PU-2024-16939

BDU:2024-03967

BIT-DOTNET-2024-30046

BIT-DOTNET-SDK-2024-30046

CESA-2024_3340

CESA-2024_3345

CVE-2024-30046

GHSA-HHC7-X9W4-CW47

INFSA-2024_2842

INFSA-2024_2843

INFSA-2024_3340

INFSA-2024_3345

RHSA-2024:2842

RHSA-2024:2843

RHSA-2024:3340

RHSA-2024:3345

RHSA-2024_2842

RHSA-2024_2843

RHSA-2024_3340

RHSA-2024_3345

RLSA-2024:2842

RLSA-2024:2843

RLSA-2024:3340

RLSA-2024:3345

USN-6773-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

.Net Framework

Visual Studio

Red Hat

Rocky Linux

Ubuntu

References · 59

• 🔥 https://github.com/bcdannyboy/CVE-2023-44487 · Exploit
• 🔥 https://github.com/imabee101/CVE-2023-44487 · Exploit
• 🔥 https://github.com/studiogangster/CVE-2023-44487 · Exploit
• 🔥 https://github.com/nxenon/cve-2023-44487 · Exploit
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-30046 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-3340.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-30045 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dotnet-2024-30046 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:3340 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-3345.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:3345 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dotnet-sdk-2024-30046 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30046 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-30046 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-30046 · Vendor Advisory