{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.7.2 versions ant\u00e9rieures \u00e0 10.0.14393.7159",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.8 versions ant\u00e9rieures \u00e0 4.8.4739.04",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.6/4.6.2 versions ant\u00e9rieures \u00e0 10.0.10240.20710",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.6.2 versions ant\u00e9rieures \u00e0 4.7.4101.01",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 versions ant\u00e9rieures \u00e0 4.7.4101.01",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.7.2 versions ant\u00e9rieures \u00e0 4.7.2.4101.03",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 2.0 Service Pack 2 versions ant\u00e9rieures \u00e0 2.0.50727.8977",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 versions ant\u00e9rieures \u00e0 3.5.4101.04",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.8.1 versions ant\u00e9rieures \u00e0 4.8.9256.03",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.7.2 versions ant\u00e9rieures \u00e0 10.0.10240.20710",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5.1 versions ant\u00e9rieures \u00e0 3.5.30729.8971",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.8 versions ant\u00e9rieures \u00e0 4.8.4739.02",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 versions ant\u00e9rieures \u00e0 3.5.30729.8972",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 versions ant\u00e9rieures \u00e0 3.5.30729.8971",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.8 versions ant\u00e9rieures \u00e0 4.8.4739.03",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.8.1 versions ant\u00e9rieures \u00e0 4.8.1.9256.03",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 versions ant\u00e9rieures \u00e0 4.7.4101.02",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.8 versions ant\u00e9rieures \u00e0 4.8.04739.02",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.7.2 versions ant\u00e9rieures \u00e0 4.7.4101.02",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.0 Service Pack 2 versions ant\u00e9rieures \u00e0 2.0.50727.8977",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": ".NET 8.0 versions ant\u00e9rieures \u00e0 8.0.7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-35264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35264"
    },
    {
      "name": "CVE-2024-30105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-30105"
    },
    {
      "name": "CVE-2024-38095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38095"
    },
    {
      "name": "CVE-2024-38081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38081"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0558",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft .Net. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft .Net",
  "vendor_advisories": [
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2024-30105",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30105"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2024-38095",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38095"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2024-38081",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38081"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2024-35264",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35264"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.17328.20424",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.6 ant\u00e9rieures \u00e0 17.6.17",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 16.0.1121.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.4 ant\u00e9rieures \u00e0 17.4.21",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.10 ant\u00e9rieures \u00e0 17.10.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (CU 27) versions ant\u00e9rieures \u00e0 15.0.4382.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5456.1000",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Defender pour IoT versions ant\u00e9rieures \u00e0 24.1.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (CU 13) versions ant\u00e9rieures \u00e0 16.0.4131.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft OLE DB Driver 19 pour SQL Server versions ant\u00e9rieures \u00e0 19.3.0005.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10412.20001",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 14.0.2056.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Dynamics 365 (on-premises) version 9.1 ant\u00e9rieures \u00e0 9.1.28.09",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (CU 31) versions ant\u00e9rieures \u00e0 14.0.3471.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 15.0.2116.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft OLE DB Driver 18 pour SQL Server versions ant\u00e9rieures \u00e0 18.7.0004.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.8 ant\u00e9rieures \u00e0 17.8.12",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 (GDR) versions ant\u00e9rieures \u00e0 13.0.6441.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 Azure Connect Feature Pack versions ant\u00e9rieures \u00e0 13.0.7037.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-37336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37336"
    },
    {
      "name": "CVE-2024-21317",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21317"
    },
    {
      "name": "CVE-2024-37328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37328"
    },
    {
      "name": "CVE-2024-38094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38094"
    },
    {
      "name": "CVE-2024-21428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21428"
    },
    {
      "name": "CVE-2024-37330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37330"
    },
    {
      "name": "CVE-2024-21308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21308"
    },
    {
      "name": "CVE-2024-37321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37321"
    },
    {
      "name": "CVE-2024-38024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38024"
    },
    {
      "name": "CVE-2024-28928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28928"
    },
    {
      "name": "CVE-2024-21303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21303"
    },
    {
      "name": "CVE-2024-21425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21425"
    },
    {
      "name": "CVE-2024-20701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20701"
    },
    {
      "name": "CVE-2024-21415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21415"
    },
    {
      "name": "CVE-2024-35264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35264"
    },
    {
      "name": "CVE-2024-37334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37334"
    },
    {
      "name": "CVE-2024-37322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37322"
    },
    {
      "name": "CVE-2024-35256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35256"
    },
    {
      "name": "CVE-2024-37320",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37320"
    },
    {
      "name": "CVE-2024-21398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21398"
    },
    {
      "name": "CVE-2024-37332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37332"
    },
    {
      "name": "CVE-2024-30105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-30105"
    },
    {
      "name": "CVE-2024-32987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-32987"
    },
    {
      "name": "CVE-2024-37326",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37326"
    },
    {
      "name": "CVE-2024-21332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21332"
    },
    {
      "name": "CVE-2024-37324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37324"
    },
    {
      "name": "CVE-2024-37331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37331"
    },
    {
      "name": "CVE-2024-21335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21335"
    },
    {
      "name": "CVE-2024-37329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37329"
    },
    {
      "name": "CVE-2024-21414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21414"
    },
    {
      "name": "CVE-2024-35271",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35271"
    },
    {
      "name": "CVE-2024-37319",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37319"
    },
    {
      "name": "CVE-2024-37327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37327"
    },
    {
      "name": "CVE-2024-21449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21449"
    },
    {
      "name": "CVE-2024-38095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38095"
    },
    {
      "name": "CVE-2024-37333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37333"
    },
    {
      "name": "CVE-2024-21373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21373"
    },
    {
      "name": "CVE-2024-38081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38081"
    },
    {
      "name": "CVE-2024-30061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-30061"
    },
    {
      "name": "CVE-2024-38089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38089"
    },
    {
      "name": "CVE-2024-38087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38087"
    },
    {
      "name": "CVE-2024-35272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35272"
    },
    {
      "name": "CVE-2024-37318",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37318"
    },
    {
      "name": "CVE-2024-21331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21331"
    },
    {
      "name": "CVE-2024-38088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38088"
    },
    {
      "name": "CVE-2024-37323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37323"
    },
    {
      "name": "CVE-2024-38023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38023"
    },
    {
      "name": "CVE-2024-21333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21333"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0560",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
  "vendor_advisories": [
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21398",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21398"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21303",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21303"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37319",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37319"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21335",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21335"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37321",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37321"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-28928",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28928"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37324",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37324"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21373",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21373"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-30061",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30061"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21308",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21308"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38089",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38089"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38024"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-30105",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30105"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37331",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37331"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38088",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38088"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37333",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37333"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37329",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37329"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-35271",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35271"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21331",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21331"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38095",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38095"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37334",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37334"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-20701",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20701"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21428",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21428"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21333",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21333"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37318",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37318"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37330",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37330"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37323",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37323"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21425",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21425"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37320",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37320"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37327",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37327"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38087",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38087"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37336",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37336"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21317",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21317"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37332",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37332"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38023",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38023"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-35264",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35264"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-35272",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35272"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-35256",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35256"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38094",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21414",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21414"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21449",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21449"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38081",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38081"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21332",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21332"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37322",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37322"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37326",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37326"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37328",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37328"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-32987",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-32987"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21415",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21415"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.7.2 versions ant\u00e9rieures \u00e0 10.0.14393.7159",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.8 versions ant\u00e9rieures \u00e0 4.8.4739.04",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.6/4.6.2 versions ant\u00e9rieures \u00e0 10.0.10240.20710",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.6.2 versions ant\u00e9rieures \u00e0 4.7.4101.01",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 versions ant\u00e9rieures \u00e0 4.7.4101.01",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.7.2 versions ant\u00e9rieures \u00e0 4.7.2.4101.03",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 2.0 Service Pack 2 versions ant\u00e9rieures \u00e0 2.0.50727.8977",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 versions ant\u00e9rieures \u00e0 3.5.4101.04",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.8.1 versions ant\u00e9rieures \u00e0 4.8.9256.03",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.7.2 versions ant\u00e9rieures \u00e0 10.0.10240.20710",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5.1 versions ant\u00e9rieures \u00e0 3.5.30729.8971",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.8 versions ant\u00e9rieures \u00e0 4.8.4739.02",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 versions ant\u00e9rieures \u00e0 3.5.30729.8972",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 versions ant\u00e9rieures \u00e0 3.5.30729.8971",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.8 versions ant\u00e9rieures \u00e0 4.8.4739.03",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.8.1 versions ant\u00e9rieures \u00e0 4.8.1.9256.03",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 versions ant\u00e9rieures \u00e0 4.7.4101.02",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 4.8 versions ant\u00e9rieures \u00e0 4.8.04739.02",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.5 AND 4.7.2 versions ant\u00e9rieures \u00e0 4.7.4101.02",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft .NET Framework 3.0 Service Pack 2 versions ant\u00e9rieures \u00e0 2.0.50727.8977",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": ".NET 8.0 versions ant\u00e9rieures \u00e0 8.0.7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-35264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35264"
    },
    {
      "name": "CVE-2024-30105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-30105"
    },
    {
      "name": "CVE-2024-38095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38095"
    },
    {
      "name": "CVE-2024-38081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38081"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0558",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft .Net. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft .Net",
  "vendor_advisories": [
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2024-30105",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30105"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2024-38095",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38095"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2024-38081",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38081"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft .Net CVE-2024-35264",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35264"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft SharePoint Server Subscription Edition versions ant\u00e9rieures \u00e0 16.0.17328.20424",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.6 ant\u00e9rieures \u00e0 17.6.17",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 16.0.1121.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.4 ant\u00e9rieures \u00e0 17.4.21",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.10 ant\u00e9rieures \u00e0 17.10.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (CU 27) versions ant\u00e9rieures \u00e0 15.0.4382.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Enterprise Server 2016 versions ant\u00e9rieures \u00e0 16.0.5456.1000",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Defender pour IoT versions ant\u00e9rieures \u00e0 24.1.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2022 pour syst\u00e8mes x64 (CU 13) versions ant\u00e9rieures \u00e0 16.0.4131.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft OLE DB Driver 19 pour SQL Server versions ant\u00e9rieures \u00e0 19.3.0005.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SharePoint Server 2019 versions ant\u00e9rieures \u00e0 16.0.10412.20001",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 14.0.2056.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Dynamics 365 (on-premises) version 9.1 ant\u00e9rieures \u00e0 9.1.28.09",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2017 pour syst\u00e8mes x64 (CU 31) versions ant\u00e9rieures \u00e0 14.0.3471.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2019 pour syst\u00e8mes x64 (GDR) versions ant\u00e9rieures \u00e0 15.0.2116.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft OLE DB Driver 18 pour SQL Server versions ant\u00e9rieures \u00e0 18.7.0004.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2022 version 17.8 ant\u00e9rieures \u00e0 17.8.12",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 (GDR) versions ant\u00e9rieures \u00e0 13.0.6441.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2016 pour syst\u00e8mes x64 Service Pack 3 Azure Connect Feature Pack versions ant\u00e9rieures \u00e0 13.0.7037.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-37336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37336"
    },
    {
      "name": "CVE-2024-21317",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21317"
    },
    {
      "name": "CVE-2024-37328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37328"
    },
    {
      "name": "CVE-2024-38094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38094"
    },
    {
      "name": "CVE-2024-21428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21428"
    },
    {
      "name": "CVE-2024-37330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37330"
    },
    {
      "name": "CVE-2024-21308",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21308"
    },
    {
      "name": "CVE-2024-37321",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37321"
    },
    {
      "name": "CVE-2024-38024",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38024"
    },
    {
      "name": "CVE-2024-28928",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28928"
    },
    {
      "name": "CVE-2024-21303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21303"
    },
    {
      "name": "CVE-2024-21425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21425"
    },
    {
      "name": "CVE-2024-20701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-20701"
    },
    {
      "name": "CVE-2024-21415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21415"
    },
    {
      "name": "CVE-2024-35264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35264"
    },
    {
      "name": "CVE-2024-37334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37334"
    },
    {
      "name": "CVE-2024-37322",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37322"
    },
    {
      "name": "CVE-2024-35256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35256"
    },
    {
      "name": "CVE-2024-37320",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37320"
    },
    {
      "name": "CVE-2024-21398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21398"
    },
    {
      "name": "CVE-2024-37332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37332"
    },
    {
      "name": "CVE-2024-30105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-30105"
    },
    {
      "name": "CVE-2024-32987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-32987"
    },
    {
      "name": "CVE-2024-37326",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37326"
    },
    {
      "name": "CVE-2024-21332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21332"
    },
    {
      "name": "CVE-2024-37324",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37324"
    },
    {
      "name": "CVE-2024-37331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37331"
    },
    {
      "name": "CVE-2024-21335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21335"
    },
    {
      "name": "CVE-2024-37329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37329"
    },
    {
      "name": "CVE-2024-21414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21414"
    },
    {
      "name": "CVE-2024-35271",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35271"
    },
    {
      "name": "CVE-2024-37319",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37319"
    },
    {
      "name": "CVE-2024-37327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37327"
    },
    {
      "name": "CVE-2024-21449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21449"
    },
    {
      "name": "CVE-2024-38095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38095"
    },
    {
      "name": "CVE-2024-37333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37333"
    },
    {
      "name": "CVE-2024-21373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21373"
    },
    {
      "name": "CVE-2024-38081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38081"
    },
    {
      "name": "CVE-2024-30061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-30061"
    },
    {
      "name": "CVE-2024-38089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38089"
    },
    {
      "name": "CVE-2024-38087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38087"
    },
    {
      "name": "CVE-2024-35272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35272"
    },
    {
      "name": "CVE-2024-37318",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37318"
    },
    {
      "name": "CVE-2024-21331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21331"
    },
    {
      "name": "CVE-2024-38088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38088"
    },
    {
      "name": "CVE-2024-37323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37323"
    },
    {
      "name": "CVE-2024-38023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38023"
    },
    {
      "name": "CVE-2024-21333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21333"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0560",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Microsoft. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Microsoft",
  "vendor_advisories": [
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21398",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21398"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21303",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21303"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37319",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37319"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21335",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21335"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37321",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37321"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-28928",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28928"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37324",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37324"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21373",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21373"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-30061",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30061"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21308",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21308"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38089",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38089"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38024",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38024"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-30105",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30105"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37331",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37331"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38088",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38088"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37333",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37333"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37329",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37329"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-35271",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35271"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21331",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21331"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38095",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38095"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37334",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37334"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-20701",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20701"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21428",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21428"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21333",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21333"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37318",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37318"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37330",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37330"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37323",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37323"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21425",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21425"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37320",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37320"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37327",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37327"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38087",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38087"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37336",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37336"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21317",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21317"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37332",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37332"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38023",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38023"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-35264",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35264"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-35272",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35272"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-35256",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35256"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38094",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21414",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21414"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21449",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21449"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-38081",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38081"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21332",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21332"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37322",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37322"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37326",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37326"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-37328",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37328"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-32987",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-32987"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2024-21415",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21415"
    }
  ]
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "aspnetcore-runtime-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "aspnetcore-runtime-dbg-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "aspnetcore-targeting-pack-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "dotnet-apphost-pack-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "dotnet-host"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "dotnet-hostfxr-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "dotnet-runtime-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "dotnet-runtime-dbg-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "dotnet-sdk-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.107-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "dotnet-sdk-8.0-source-built-artifacts"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.107-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "dotnet-sdk-dbg-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.107-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "dotnet-targeting-pack-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "dotnet-templates-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.107-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "netstandard-targeting-pack-2.1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.107-1.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.107 and Runtime 8.0.7.\n\nSecurity Fix(es):\n\n* dotnet: DoS in System.Text.Json (CVE-2024-30105)\n* dotnet: DoS in ASP.NET Core 8 (CVE-2024-35264)\n* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "id": "ALSA-2024:4450",
  "modified": "2024-07-11T08:47:11Z",
  "published": "2024-07-10T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2024:4450"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-30105"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-35264"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-38095"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2295320"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2295321"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2295323"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/9/ALSA-2024-4450.html"
    }
  ],
  "related": [
    "CVE-2024-30105",
    "CVE-2024-35264",
    "CVE-2024-38095"
  ],
  "summary": "Important: dotnet8.0 security update"
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "aspnetcore-runtime-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "aspnetcore-runtime-dbg-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "aspnetcore-targeting-pack-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "dotnet"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.107-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "dotnet-apphost-pack-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "dotnet-host"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "dotnet-hostfxr-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "dotnet-runtime-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "dotnet-runtime-dbg-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "dotnet-sdk-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.107-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "dotnet-sdk-8.0-source-built-artifacts"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.107-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "dotnet-sdk-dbg-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.107-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "dotnet-targeting-pack-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.7-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "dotnet-templates-8.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.107-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "netstandard-targeting-pack-2.1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.0.107-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": ".NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.\n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK  8.0.107 and Runtime 8.0.7.\n\nSecurity Fix(es):\n\n* dotnet: DoS in System.Text.Json (CVE-2024-30105)\n* dotnet: DoS in ASP.NET Core 8 (CVE-2024-35264)\n* dotnet: DoS when parsing X.509 Content and ObjectIdentifiers (CVE-2024-38095)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "id": "ALSA-2024:4451",
  "modified": "2024-07-11T08:44:08Z",
  "published": "2024-07-10T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2024:4451"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-30105"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-35264"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-38095"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2295320"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2295321"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2295323"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/8/ALSA-2024-4451.html"
    }
  ],
  "related": [
    "CVE-2024-30105",
    "CVE-2024-35264",
    "CVE-2024-38095"
  ],
  "summary": "Important: dotnet8.0 security update"
}

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, Microsoft Corp",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "7.3 (\u0420\u0415\u0414 \u041e\u0421), 17.4 (Microsoft Visual Studio 2022), 17.6 (Microsoft Visual Studio 2022), 8.0 (.NET), \u043e\u0442 7.0.0 \u0434\u043e 8.0.3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (System.Text.Json), 17.10 (Microsoft Visual Studio 2022), 17.8 (Microsoft Visual Studio 2022)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f System.Text.Json:\nhttps://www.nuget.org/packages/System.Text.Json#versions-body-tab\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Microsoft Corp.:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30105\n\n\u0414\u043b\u044f \u0420\u0435\u0434\u041e\u0421: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "09.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "26.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "15.07.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-05254",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-30105",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "\u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), Microsoft Visual Studio 2022, .NET, System.Text.Json",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 JsonSerializer.DeserializeAsyncEnumerable \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 System.Text.Json \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Microsoft .NET \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Microsoft Visual Studio, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0440\u0430\u0441\u0445\u043e\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u0430 (\u00ab\u0418\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u00bb) (CWE-400)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 JsonSerializer.DeserializeAsyncEnumerable \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 System.Text.Json \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Microsoft .NET \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Microsoft Visual Studio \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0440\u0430\u0441\u0445\u043e\u0434\u043e\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30105\nhttps://github.com/dotnet/runtime/issues/104619\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-400",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-30105",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-30105"
    }
  },
  "description": "Microsoft .NET Core\u548cMicrosoft Visual Studio\u90fd\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002.NET Core\u662f\u4e00\u5957\u514d\u8d39\u7684\u5f00\u6e90\u5f00\u53d1\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u5177\u6709\u591a\u8bed\u8a00\u652f\u6301\u548c\u8de8\u5e73\u53f0\u7b49\u7279\u70b9\u3002Microsoft Visual Studio\u662f\u4e00\u6b3e\u5f00\u53d1\u5de5\u5177\u5957\u4ef6\u7cfb\u5217\u4ea7\u54c1\uff0c\u4e5f\u662f\u4e00\u4e2a\u57fa\u672c\u5b8c\u6574\u7684\u5f00\u53d1\u5de5\u5177\u96c6\uff0c\u5b83\u5305\u62ec\u4e86\u6574\u4e2a\u8f6f\u4ef6\u751f\u547d\u5468\u671f\u4e2d\u6240\u9700\u8981\u7684\u5927\u90e8\u5206\u5de5\u5177\u3002\n\nMicrosoft .NET Core\u548cVisual Studio\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u7cfb\u7edf\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30105",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-37491",
  "openTime": "2024-09-06",
  "patchDescription": "Microsoft .NET Core\u548cMicrosoft Visual Studio\u90fd\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002.NET Core\u662f\u4e00\u5957\u514d\u8d39\u7684\u5f00\u6e90\u5f00\u53d1\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u5177\u6709\u591a\u8bed\u8a00\u652f\u6301\u548c\u8de8\u5e73\u53f0\u7b49\u7279\u70b9\u3002Microsoft Visual Studio\u662f\u4e00\u6b3e\u5f00\u53d1\u5de5\u5177\u5957\u4ef6\u7cfb\u5217\u4ea7\u54c1\uff0c\u4e5f\u662f\u4e00\u4e2a\u57fa\u672c\u5b8c\u6574\u7684\u5f00\u53d1\u5de5\u5177\u96c6\uff0c\u5b83\u5305\u62ec\u4e86\u6574\u4e2a\u8f6f\u4ef6\u751f\u547d\u5468\u671f\u4e2d\u6240\u9700\u8981\u7684\u5927\u90e8\u5206\u5de5\u5177\u3002\r\n\r\nMicrosoft .NET Core\u548cVisual Studio\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u7cfb\u7edf\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft .NET Core\u548cVisual Studio\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft Visual Studio 2022 17.4",
      "Microsoft Visual Studio 2022 17.6",
      "Microsoft .NET 8.0",
      "Microsoft Visual Studio 2022 17.8",
      "Microsoft Visual Studio 2022 17.10",
      "Microsoft PowerShell 7.4"
    ]
  },
  "referenceLink": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30105",
  "serverity": "\u9ad8",
  "submitTime": "2024-07-12",
  "title": "Microsoft .NET Core\u548cVisual Studio\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

{
  "affected": [
    {
      "affectedData": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": ".NET 8.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "8.0.7",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "PowerShell 7.4",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "7.4.4",
              "status": "affected",
              "version": "7.4.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Visual Studio 2022 version 17.4",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.4.21",
              "status": "affected",
              "version": "17.4.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Visual Studio 2022 version 17.6",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.6.17",
              "status": "affected",
              "version": "17.6.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Visual Studio 2022 version 17.10",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.10.4",
              "status": "affected",
              "version": "17.10",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Microsoft Visual Studio 2022 version 17.8",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.8.12",
              "status": "affected",
              "version": "17.8.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "secure@microsoft.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2260CD28-E80F-4FFC-B8DA-44CC726FBD83",
              "versionEndIncluding": "8.0.7",
              "versionStartIncluding": "8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9079F629-6958-469E-AF83-8030B145E354",
              "versionEndExcluding": "17.4.21",
              "versionStartIncluding": "17.4.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1C74913-B238-4B3C-8F2D-37FFCCAB5E9E",
              "versionEndExcluding": "17.6.17",
              "versionStartIncluding": "17.6.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4D4B43A-9B2F-4FCC-8A24-11F102A42BCB",
              "versionEndIncluding": "17.8.12",
              "versionStartIncluding": "17.8.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4CAA048-BCAA-4CBA-81DA-E8748C441017",
              "versionEndIncluding": "17.10.4",
              "versionStartIncluding": "17.10.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": ".NET and Visual Studio Denial of Service Vulnerability"
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de denegaci\u00f3n de servicio en .NET Core y Visual Studio"
    }
  ],
  "id": "CVE-2024-30105",
  "lastModified": "2026-06-17T07:26:18.163",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "secure@microsoft.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-30105",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-07-10T15:05:16.271423Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-07-09T17:15:17.200",
  "references": [
    {
      "source": "secure@microsoft.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30105"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30105"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ],
      "source": "secure@microsoft.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}