PT-2024-3644 · Microsoft+8 · Visual Studio+9

Published 2024-05-14 · Updated 2025-11-22 · CVE-2024-30045

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions .NET and Visual Studio (affected versions not specified)

Description The issue is related to a buffer overflow in the heap, which can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

DoS

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-122

CWE-119

Related Identifiers

ALSA-2024:2842

ALSA-2024:2843

ALSA-2024:3340

ALSA-2024:3345

ALT-PU-2024-12834

ALT-PU-2024-12835

ALT-PU-2024-12836

ALT-PU-2024-12837

ALT-PU-2024-13115

ALT-PU-2024-13117

ALT-PU-2024-13118

ALT-PU-2024-13119

ALT-PU-2024-16796

ALT-PU-2024-16799

ALT-PU-2024-16800

ALT-PU-2024-16939

BDU:2024-03969

BIT-DOTNET-2024-30045

BIT-DOTNET-SDK-2024-30045

BIT-POWERSHELL-2024-30045

CESA-2024_3340

CESA-2024_3345

CVE-2024-30045

GHSA-7FCR-8QW6-92FR

INFSA-2024_2842

INFSA-2024_2843

INFSA-2024_3340

INFSA-2024_3345

RHSA-2024:2842

RHSA-2024:2843

RHSA-2024:3340

RHSA-2024:3345

RHSA-2024_2842

RHSA-2024_2843

RHSA-2024_3340

RHSA-2024_3345

RLSA-2024:2842

RLSA-2024:2843

RLSA-2024:3340

RLSA-2024:3345

USN-6773-1

Affected Products

.Net Framework

Alt Linux

Almalinux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Ubuntu

Visual Studio

References · 59

• https://linux.oracle.com/errata/ELSA-2024-2842.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:3345 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dotnet-2024-30045 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-30045 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-2843.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-30045 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30045 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-3340.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:3340 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dotnet-sdk-2024-30045 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-2842.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:2843 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03969 · Security Note
• https://linux.oracle.com/errata/ELSA-2024-2843.html · Vendor Advisory