PT-2024-7347 · Microsoft+8 · Net+9

Eirik George Tsarpalis · Published 2024-10-08 · Updated 2025-12-16 · CVE-2024-43485

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: .NET and Visual Studio (affected versions not specified)

Description: The issue is related to algorithmic complexity in the .NET and Visual Studio platform, which can be exploited by a remote attacker to cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-407

Related Identifiers

ALSA-2024:7851

ALSA-2024:7867

ALSA-2024:7868

ALSA-2024:7869

ALT-PU-2024-16695

ALT-PU-2024-16697

ALT-PU-2024-16742

ALT-PU-2024-16744

ALT-PU-2024-16751

ALT-PU-2024-16753

ALT-PU-2024-16792

ALT-PU-2024-16794

ALT-PU-2024-16799

ALT-PU-2024-16800

ALT-PU-2025-15798

ALT-PU-2025-5282

BDU:2024-08707

BIT-DOTNET-2024-43485

BIT-DOTNET-SDK-2024-43485

CESA-2024_7851

CESA-2024_7868

CVE-2024-43485

GHSA-8G4Q-XG66-9FP4

INFSA-2024_7851

INFSA-2024_7867

INFSA-2024_7868

INFSA-2024_7869

RHSA-2024:7851

RHSA-2024:7867

RHSA-2024:7868

RHSA-2024:7869

RHSA-2024:8036

RHSA-2024:8047

RHSA-2024:8048

RHSA-2024:8082

RHSA-2024_7851

RHSA-2024_7867

RHSA-2024_7868

RHSA-2024_7869

RLSA-2024:7851

RLSA-2024:7867

RLSA-2024:7868

RLSA-2024:7869

USN-7058-1

Affected Products

Alt Linux

Almalinux

Centos

Linuxmint

Net

Red Hat

Red Os

Rocky Linux

Ubuntu

Visual Studio

References · 64

• https://cve.org/CVERecord?id=CVE-2024-43485 · Security Note
• https://errata.rockylinux.org/RLSA-2024:7869 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/712687 · Security Note
• https://errata.rockylinux.org/RLSA-2024:7868 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-7867.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:7869 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8g4q-xg66-9fp4 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:7867 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-7868.html · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43485 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43484 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dotnet-sdk-2024-43485 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08707 · Security Note
• https://osv.dev/vulnerability/ALSA-2024:7851 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:7851 · Vendor Advisory