PT-2024-5163 · Microsoft+8 · Net+9

Published 2024-07-09 · Updated 2025-07-23 · CVE-2024-38095

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: .NET and Visual Studio (affected versions not specified)

Description: The issue is related to insufficient input validation in the .NET and Visual Studio software platform, which can be exploited by a remote attacker to cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2024:4438

ALSA-2024:4439

ALSA-2024:4450

ALSA-2024:4451

ALT-PU-2024-12832

ALT-PU-2024-12835

ALT-PU-2024-12836

ALT-PU-2024-13115

ALT-PU-2024-13119

ALT-PU-2024-13120

ALT-PU-2024-16742

ALT-PU-2024-16744

ALT-PU-2024-16792

ALT-PU-2024-16794

ALT-PU-2024-16799

ALT-PU-2024-16800

ALT-PU-2024-16801

BDU:2024-05713

BIT-DOTNET-2024-38095

BIT-DOTNET-SDK-2024-38095

CESA-2024_4438

CESA-2024_4451

CVE-2024-38095

GHSA-447R-WPH3-92PM

INFSA-2024_4438

INFSA-2024_4439

INFSA-2024_4450

INFSA-2024_4451

RHSA-2024:4438

RHSA-2024:4439

RHSA-2024:4450

RHSA-2024:4451

RHSA-2024_4438

RHSA-2024_4439

RHSA-2024_4450

RHSA-2024_4451

RLSA-2024:4450

RLSA-2024:4451

USN-6889-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Net

Red Hat

Red Os

Rocky Linux

Ubuntu

Visual Studio

References · 57

• https://errata.almalinux.org/9/ALSA-2024-4450.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-4450.html · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:4439 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dotnet-sdk-2024-38095 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-38095 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38095 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:4438 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-38095 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05713 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/709867 · Security Note
• https://osv.dev/vulnerability/ALSA-2024:4450 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38095 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38095 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2024-38095 · Vendor Advisory