PT-2024-7147 · Microsoft+8 · Net+10

Levi Broderick · Published 2024-10-08 · Updated 2025-12-16 · CVE-2024-43484

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions .NET, .NET Framework, and Visual Studio (affected versions not specified)

Description The issue is related to an uncontrolled memory allocation, which can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-407

CWE-789

Related Identifiers

ALSA-2024:7851

ALSA-2024:7867

ALSA-2024:7868

ALSA-2024:7869

ALT-PU-2024-16695

ALT-PU-2024-16697

ALT-PU-2024-16742

ALT-PU-2024-16744

ALT-PU-2024-16751

ALT-PU-2024-16753

ALT-PU-2024-16792

ALT-PU-2024-16794

ALT-PU-2024-16799

ALT-PU-2024-16800

ALT-PU-2025-15798

ALT-PU-2025-5282

BDU:2024-08479

BIT-DOTNET-2024-43484

BIT-DOTNET-SDK-2024-43484

CESA-2024_7851

CESA-2024_7868

CVE-2024-43484

GHSA-F32C-W444-8PPV

INFSA-2024_7851

INFSA-2024_7867

INFSA-2024_7868

INFSA-2024_7869

RHSA-2024:7851

RHSA-2024:7867

RHSA-2024:7868

RHSA-2024:7869

RHSA-2024:8036

RHSA-2024:8047

RHSA-2024:8048

RHSA-2024:8082

RHSA-2024_7851

RHSA-2024_7867

RHSA-2024_7868

RHSA-2024_7869

RLSA-2024:7851

RLSA-2024:7867

RLSA-2024:7868

RLSA-2024:7869

USN-7058-1

Affected Products

.Net Framework

Alt Linux

Almalinux

Centos

Linuxmint

Net

Red Hat

Red Os

Rocky Linux

Ubuntu

Visual Studio

References · 63

• https://cve.org/CVERecord?id=CVE-2024-43484 · Security Note
• https://errata.rockylinux.org/RLSA-2024:7869 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:7868 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-43484 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-7867.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:7869 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:7867 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-7868.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43484 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-43484 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43484 · Security Note
• https://osv.dev/vulnerability/ALSA-2024:7851 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08479 · Security Note
• https://osv.dev/vulnerability/RLSA-2024:7851 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-7869.html · Vendor Advisory