var-202402-1535
Vulnerability from variot
.NET Denial of Service Vulnerability. Microsoft's Microsoft Visual Studio and ASP.NET Core for, .NET Service operation is interrupted due to a defect in (DoS) A state vulnerability exists.Service operation interruption (DoS) It may be in a state.
The following advisory data is extracted from:
https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0814.json
Red Hat officially shut down their mailing list notifications October 10, 2023. Due to this, Packet Storm has recreated the below data as a reference point to raise awareness. It must be noted that due to an inability to easily track revision updates without crawling Red Hat's archive, these advisories are single notifications and we strongly suggest that you visit the Red Hat provided links to ensure you have the latest information available if the subject matter listed pertains to your environment.
- Packet Storm Staff
==================================================================== Red Hat Security Advisory
Synopsis: Important: .NET 6.0 security, bug fix, and enhancement update Advisory ID: RHSA-2024:0814-03 Product: .NET Core on Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2024:0814 Issue date: 2024-02-14 Revision: 03 CVE Names: CVE-2024-21386 ====================================================================
Summary:
An update for .NET 6.0 is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description:
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.127 and .NET Runtime 6.0.27.
The following packages have been upgraded to a later upstream version: rh-dotnet60-dotnet (6.0.127). (BZ#2262321)
Security Fix(es):
-
dotnet: Denial of Service in SignalR server (CVE-2024-21386)
-
dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Solution:
https://access.redhat.com/articles/11258
CVEs:
CVE-2024-21386
References:
https://access.redhat.com/security/updates/classification/#important https://bugzilla.redhat.com/show_bug.cgi?id=2263085 https://bugzilla.redhat.com/show_bug.cgi?id=2263086
. ========================================================================== Ubuntu Security Notice USN-6634-1 February 13, 2024
dotnet6, dotnet7, dotnet8 vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.10
- Ubuntu 22.04 LTS
Summary:
Several security issues were fixed in .NET.
Software Description: - dotnet6: dotNET CLI tools and runtime - dotnet7: dotNET CLI tools and runtime - dotnet8: dotNET CLI tools and runtime
Details:
Brennan Conroy discovered that .NET with SignalR did not properly handle malicious clients. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-21386)
Bahaa Naamneh discovered that .NET with OpenSSL support did not properly parse X509 certificates. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-21404)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 23.10: aspnetcore-runtime-6.0 6.0.127-0ubuntu1~23.10.1 aspnetcore-runtime-7.0 7.0.116-0ubuntu1~23.10.1 aspnetcore-runtime-8.0 8.0.2-0ubuntu1~23.10.1 dotnet-host 6.0.127-0ubuntu1~23.10.1 dotnet-host-7.0 7.0.116-0ubuntu1~23.10.1 dotnet-host-8.0 8.0.2-0ubuntu1~23.10.1 dotnet-hostfxr-6.0 6.0.127-0ubuntu1~23.10.1 dotnet-hostfxr-7.0 7.0.116-0ubuntu1~23.10.1 dotnet-hostfxr-8.0 8.0.2-0ubuntu1~23.10.1 dotnet-runtime-6.0 6.0.127-0ubuntu1~23.10.1 dotnet-runtime-7.0 7.0.116-0ubuntu1~23.10.1 dotnet-runtime-8.0 8.0.2-0ubuntu1~23.10.1 dotnet-sdk-6.0 6.0.127-0ubuntu1~23.10.1 dotnet-sdk-7.0 7.0.116-0ubuntu1~23.10.1 dotnet-sdk-8.0 8.0.102-0ubuntu1~23.10.1 dotnet6 6.0.127-0ubuntu1~23.10.1 dotnet7 7.0.116-0ubuntu1~23.10.1 dotnet8 8.0.102-8.0.2-0ubuntu1~23.10.1
Ubuntu 22.04 LTS: aspnetcore-runtime-6.0 6.0.127-0ubuntu1~22.04.1 aspnetcore-runtime-7.0 7.0.116-0ubuntu1~22.04.1 aspnetcore-runtime-8.0 8.0.2-0ubuntu1~22.04.1 dotnet-host 6.0.127-0ubuntu1~22.04.1 dotnet-host-7.0 7.0.116-0ubuntu1~22.04.1 dotnet-host-8.0 8.0.2-0ubuntu1~22.04.1 dotnet-hostfxr-6.0 6.0.127-0ubuntu1~22.04.1 dotnet-hostfxr-7.0 7.0.116-0ubuntu1~22.04.1 dotnet-hostfxr-8.0 8.0.2-0ubuntu1~22.04.1 dotnet-runtime-6.0 6.0.127-0ubuntu1~22.04.1 dotnet-runtime-7.0 7.0.116-0ubuntu1~22.04.1 dotnet-runtime-8.0 8.0.2-0ubuntu1~22.04.1 dotnet-sdk-6.0 6.0.127-0ubuntu1~22.04.1 dotnet-sdk-7.0 7.0.116-0ubuntu1~22.04.1 dotnet-sdk-8.0 8.0.102-0ubuntu1~22.04.1 dotnet6 6.0.127-0ubuntu1~22.04.1 dotnet7 7.0.116-0ubuntu1~22.04.1 dotnet8 8.0.102-8.0.2-0ubuntu1~22.04.1
In general, a standard system update will make all the necessary changes
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202402-1535",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "visual studio 2022",
"scope": "gte",
"trust": 1.0,
"vendor": "microsoft",
"version": "17.6.0"
},
{
"model": "asp.net core",
"scope": "lt",
"trust": 1.0,
"vendor": "microsoft",
"version": "6.0.27"
},
{
"model": "visual studio 2022",
"scope": "gte",
"trust": 1.0,
"vendor": "microsoft",
"version": "17.8.0"
},
{
"model": "asp.net core",
"scope": "gte",
"trust": 1.0,
"vendor": "microsoft",
"version": "8.0.0"
},
{
"model": "visual studio 2022",
"scope": "gte",
"trust": 1.0,
"vendor": "microsoft",
"version": "17.4.0"
},
{
"model": "visual studio 2022",
"scope": "lt",
"trust": 1.0,
"vendor": "microsoft",
"version": "17.8.7"
},
{
"model": "visual studio 2022",
"scope": "lt",
"trust": 1.0,
"vendor": "microsoft",
"version": "17.4.16"
},
{
"model": "asp.net core",
"scope": "lt",
"trust": 1.0,
"vendor": "microsoft",
"version": "7.0.16"
},
{
"model": "visual studio 2022",
"scope": "lt",
"trust": 1.0,
"vendor": "microsoft",
"version": "17.6.12"
},
{
"model": "asp.net core",
"scope": "gte",
"trust": 1.0,
"vendor": "microsoft",
"version": "7.0.0"
},
{
"model": "asp.net core",
"scope": "lt",
"trust": 1.0,
"vendor": "microsoft",
"version": "8.0.2"
},
{
"model": "asp.net core",
"scope": "gte",
"trust": 1.0,
"vendor": "microsoft",
"version": "6.0.0"
},
{
"model": "microsoft visual studio",
"scope": "eq",
"trust": 0.8,
"vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
"version": "2022 17.4"
},
{
"model": "microsoft visual studio",
"scope": "eq",
"trust": 0.8,
"vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
"version": "2022 17.8"
},
{
"model": "microsoft visual studio",
"scope": "eq",
"trust": 0.8,
"vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
"version": "2022 17.6"
},
{
"model": "asp.net core",
"scope": null,
"trust": 0.8,
"vendor": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8",
"version": null
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2024-002866"
},
{
"db": "NVD",
"id": "CVE-2024-21386"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "8.0.2",
"versionStartIncluding": "8.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "7.0.16",
"versionStartIncluding": "7.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "6.0.27",
"versionStartIncluding": "6.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "17.6.12",
"versionStartIncluding": "17.6.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "17.4.16",
"versionStartIncluding": "17.4.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "17.8.7",
"versionStartIncluding": "17.8.0",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2024-21386"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Red Hat",
"sources": [
{
"db": "PACKETSTORM",
"id": "177137"
},
{
"db": "PACKETSTORM",
"id": "177124"
},
{
"db": "PACKETSTORM",
"id": "177122"
},
{
"db": "PACKETSTORM",
"id": "177121"
},
{
"db": "PACKETSTORM",
"id": "177120"
},
{
"db": "PACKETSTORM",
"id": "177119"
},
{
"db": "PACKETSTORM",
"id": "177155"
}
],
"trust": 0.7
},
"cve": "CVE-2024-21386",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "secure@microsoft.com",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "OTHER",
"availabilityImpact": "High",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "JVNDB-2024-002866",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "secure@microsoft.com",
"id": "CVE-2024-21386",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "OTHER",
"id": "JVNDB-2024-002866",
"trust": 0.8,
"value": "High"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2024-002866"
},
{
"db": "NVD",
"id": "CVE-2024-21386"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": ".NET Denial of Service Vulnerability. Microsoft\u0027s Microsoft Visual Studio and ASP.NET Core for, .NET Service operation is interrupted due to a defect in (DoS) A state vulnerability exists.Service operation interruption (DoS) It may be in a state. \n\nThe following advisory data is extracted from:\n\nhttps://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0814.json\n\nRed Hat officially shut down their mailing list notifications October 10, 2023. Due to this, Packet Storm has recreated the below data as a reference point to raise awareness. It must be noted that due to an inability to easily track revision updates without crawling Red Hat\u0027s archive, these advisories are single notifications and we strongly suggest that you visit the Red Hat provided links to ensure you have the latest information available if the subject matter listed pertains to your environment. \n\n- Packet Storm Staff\n\n\n\n\n====================================================================\nRed Hat Security Advisory\n\nSynopsis: Important: .NET 6.0 security, bug fix, and enhancement update\nAdvisory ID: RHSA-2024:0814-03\nProduct: .NET Core on Red Hat Enterprise Linux\nAdvisory URL: https://access.redhat.com/errata/RHSA-2024:0814\nIssue date: 2024-02-14\nRevision: 03\nCVE Names: CVE-2024-21386\n====================================================================\n\nSummary: \n\nAn update for .NET 6.0 is now available for Red Hat Enterprise Linux 7. \n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. \n\n\n\n\nDescription:\n\n.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. \n\nNew versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 6.0.127 and .NET Runtime 6.0.27. \n\nThe following packages have been upgraded to a later upstream version: rh-dotnet60-dotnet (6.0.127). (BZ#2262321)\n\nSecurity Fix(es):\n\n* dotnet: Denial of Service in SignalR server (CVE-2024-21386)\n\n* dotnet: Denial of Service in X509Certificate2 (CVE-2024-21404)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. \n\n\nSolution:\n\nhttps://access.redhat.com/articles/11258\n\n\n\nCVEs:\n\nCVE-2024-21386\n\nReferences:\n\nhttps://access.redhat.com/security/updates/classification/#important\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2263085\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2263086\n\n. ==========================================================================\nUbuntu Security Notice USN-6634-1\nFebruary 13, 2024\n\ndotnet6, dotnet7, dotnet8 vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 23.10\n- Ubuntu 22.04 LTS\n\nSummary:\n\nSeveral security issues were fixed in .NET. \n\nSoftware Description:\n- dotnet6: dotNET CLI tools and runtime\n- dotnet7: dotNET CLI tools and runtime\n- dotnet8: dotNET CLI tools and runtime\n\nDetails:\n\nBrennan Conroy discovered that .NET with SignalR did not properly\nhandle malicious clients. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2024-21386)\n\nBahaa Naamneh discovered that .NET with OpenSSL support did not\nproperly parse X509 certificates. An attacker could possibly use\nthis issue to cause a denial of service. (CVE-2024-21404)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 23.10:\n aspnetcore-runtime-6.0 6.0.127-0ubuntu1~23.10.1\n aspnetcore-runtime-7.0 7.0.116-0ubuntu1~23.10.1\n aspnetcore-runtime-8.0 8.0.2-0ubuntu1~23.10.1\n dotnet-host 6.0.127-0ubuntu1~23.10.1\n dotnet-host-7.0 7.0.116-0ubuntu1~23.10.1\n dotnet-host-8.0 8.0.2-0ubuntu1~23.10.1\n dotnet-hostfxr-6.0 6.0.127-0ubuntu1~23.10.1\n dotnet-hostfxr-7.0 7.0.116-0ubuntu1~23.10.1\n dotnet-hostfxr-8.0 8.0.2-0ubuntu1~23.10.1\n dotnet-runtime-6.0 6.0.127-0ubuntu1~23.10.1\n dotnet-runtime-7.0 7.0.116-0ubuntu1~23.10.1\n dotnet-runtime-8.0 8.0.2-0ubuntu1~23.10.1\n dotnet-sdk-6.0 6.0.127-0ubuntu1~23.10.1\n dotnet-sdk-7.0 7.0.116-0ubuntu1~23.10.1\n dotnet-sdk-8.0 8.0.102-0ubuntu1~23.10.1\n dotnet6 6.0.127-0ubuntu1~23.10.1\n dotnet7 7.0.116-0ubuntu1~23.10.1\n dotnet8 8.0.102-8.0.2-0ubuntu1~23.10.1\n\nUbuntu 22.04 LTS:\n aspnetcore-runtime-6.0 6.0.127-0ubuntu1~22.04.1\n aspnetcore-runtime-7.0 7.0.116-0ubuntu1~22.04.1\n aspnetcore-runtime-8.0 8.0.2-0ubuntu1~22.04.1\n dotnet-host 6.0.127-0ubuntu1~22.04.1\n dotnet-host-7.0 7.0.116-0ubuntu1~22.04.1\n dotnet-host-8.0 8.0.2-0ubuntu1~22.04.1\n dotnet-hostfxr-6.0 6.0.127-0ubuntu1~22.04.1\n dotnet-hostfxr-7.0 7.0.116-0ubuntu1~22.04.1\n dotnet-hostfxr-8.0 8.0.2-0ubuntu1~22.04.1\n dotnet-runtime-6.0 6.0.127-0ubuntu1~22.04.1\n dotnet-runtime-7.0 7.0.116-0ubuntu1~22.04.1\n dotnet-runtime-8.0 8.0.2-0ubuntu1~22.04.1\n dotnet-sdk-6.0 6.0.127-0ubuntu1~22.04.1\n dotnet-sdk-7.0 7.0.116-0ubuntu1~22.04.1\n dotnet-sdk-8.0 8.0.102-0ubuntu1~22.04.1\n dotnet6 6.0.127-0ubuntu1~22.04.1\n dotnet7 7.0.116-0ubuntu1~22.04.1\n dotnet8 8.0.102-8.0.2-0ubuntu1~22.04.1\n\nIn general, a standard system update will make all the necessary changes",
"sources": [
{
"db": "NVD",
"id": "CVE-2024-21386"
},
{
"db": "JVNDB",
"id": "JVNDB-2024-002866"
},
{
"db": "VULMON",
"id": "CVE-2024-21386"
},
{
"db": "PACKETSTORM",
"id": "177137"
},
{
"db": "PACKETSTORM",
"id": "177124"
},
{
"db": "PACKETSTORM",
"id": "177122"
},
{
"db": "PACKETSTORM",
"id": "177121"
},
{
"db": "PACKETSTORM",
"id": "177120"
},
{
"db": "PACKETSTORM",
"id": "177119"
},
{
"db": "PACKETSTORM",
"id": "177110"
},
{
"db": "PACKETSTORM",
"id": "177155"
}
],
"trust": 2.43
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2024-21386",
"trust": 3.5
},
{
"db": "JVNDB",
"id": "JVNDB-2024-002866",
"trust": 0.8
},
{
"db": "VULMON",
"id": "CVE-2024-21386",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "177137",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "177124",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "177122",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "177121",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "177120",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "177119",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "177110",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "177155",
"trust": 0.1
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2024-21386"
},
{
"db": "JVNDB",
"id": "JVNDB-2024-002866"
},
{
"db": "PACKETSTORM",
"id": "177137"
},
{
"db": "PACKETSTORM",
"id": "177124"
},
{
"db": "PACKETSTORM",
"id": "177122"
},
{
"db": "PACKETSTORM",
"id": "177121"
},
{
"db": "PACKETSTORM",
"id": "177120"
},
{
"db": "PACKETSTORM",
"id": "177119"
},
{
"db": "PACKETSTORM",
"id": "177110"
},
{
"db": "PACKETSTORM",
"id": "177155"
},
{
"db": "NVD",
"id": "CVE-2024-21386"
}
]
},
"id": "VAR-202402-1535",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VARIoT devices database",
"id": null
}
],
"trust": 0.21178882
},
"last_update_date": "2024-05-30T23:03:16.933000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": ".NET\u00a0Denial\u00a0of\u00a0Service\u00a0Vulnerability Security Update Guide",
"trust": 0.8,
"url": "https://msrc.microsoft.com/update-guide/en-us/vulnerability/cve-2024-21386"
},
{
"title": "Red Hat: ",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=cve-2024-21386"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2024-21386"
},
{
"db": "JVNDB",
"id": "JVNDB-2024-002866"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
},
{
"problemtype": "Lack of information (CWE-noinfo) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2024-002866"
},
{
"db": "NVD",
"id": "CVE-2024-21386"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.6,
"url": "https://nvd.nist.gov/vuln/detail/cve-2024-21386"
},
{
"trust": 1.1,
"url": "https://msrc.microsoft.com/update-guide/vulnerability/cve-2024-21386"
},
{
"trust": 0.8,
"url": "https://www.ipa.go.jp/security/security-alert/2023/0214-ms.html"
},
{
"trust": 0.8,
"url": "https://www.jpcert.or.jp/at/2024/at240006.html"
},
{
"trust": 0.7,
"url": "https://access.redhat.com/articles/11258"
},
{
"trust": 0.7,
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2263086"
},
{
"trust": 0.7,
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"trust": 0.7,
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2263085"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/cve/cve-2024-21386"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0827.json"
},
{
"trust": 0.1,
"url": "https://issues.redhat.com/browse/rhel-23939"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2024:0827"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2024:0814"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0814.json"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2024:0808"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0808.json"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2024:0807"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0807.json"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0806.json"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2024:0806"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2024:0805"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0805.json"
},
{
"trust": 0.1,
"url": "https://ubuntu.com/security/notices/usn-6634-1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/dotnet8/8.0.102-8.0.2-0ubuntu1~23.10.1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/dotnet7/7.0.116-0ubuntu1~23.10.1"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2024-21404"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/dotnet6/6.0.127-0ubuntu1~22.04.1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/dotnet8/8.0.102-8.0.2-0ubuntu1~22.04.1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/dotnet7/7.0.116-0ubuntu1~22.04.1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/dotnet6/6.0.127-0ubuntu1~23.10.1"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/errata/rhsa-2024:0848"
},
{
"trust": 0.1,
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0848.json"
},
{
"trust": 0.1,
"url": "https://issues.redhat.com/browse/rhel-23938"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2024-21386"
},
{
"db": "JVNDB",
"id": "JVNDB-2024-002866"
},
{
"db": "PACKETSTORM",
"id": "177137"
},
{
"db": "PACKETSTORM",
"id": "177124"
},
{
"db": "PACKETSTORM",
"id": "177122"
},
{
"db": "PACKETSTORM",
"id": "177121"
},
{
"db": "PACKETSTORM",
"id": "177120"
},
{
"db": "PACKETSTORM",
"id": "177119"
},
{
"db": "PACKETSTORM",
"id": "177110"
},
{
"db": "PACKETSTORM",
"id": "177155"
},
{
"db": "NVD",
"id": "CVE-2024-21386"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULMON",
"id": "CVE-2024-21386"
},
{
"db": "JVNDB",
"id": "JVNDB-2024-002866"
},
{
"db": "PACKETSTORM",
"id": "177137"
},
{
"db": "PACKETSTORM",
"id": "177124"
},
{
"db": "PACKETSTORM",
"id": "177122"
},
{
"db": "PACKETSTORM",
"id": "177121"
},
{
"db": "PACKETSTORM",
"id": "177120"
},
{
"db": "PACKETSTORM",
"id": "177119"
},
{
"db": "PACKETSTORM",
"id": "177110"
},
{
"db": "PACKETSTORM",
"id": "177155"
},
{
"db": "NVD",
"id": "CVE-2024-21386"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2024-02-13T00:00:00",
"db": "VULMON",
"id": "CVE-2024-21386"
},
{
"date": "2024-02-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2024-002866"
},
{
"date": "2024-02-15T15:12:47",
"db": "PACKETSTORM",
"id": "177137"
},
{
"date": "2024-02-14T15:09:06",
"db": "PACKETSTORM",
"id": "177124"
},
{
"date": "2024-02-14T15:08:50",
"db": "PACKETSTORM",
"id": "177122"
},
{
"date": "2024-02-14T15:08:43",
"db": "PACKETSTORM",
"id": "177121"
},
{
"date": "2024-02-14T15:08:33",
"db": "PACKETSTORM",
"id": "177120"
},
{
"date": "2024-02-14T15:08:24",
"db": "PACKETSTORM",
"id": "177119"
},
{
"date": "2024-02-14T15:06:51",
"db": "PACKETSTORM",
"id": "177110"
},
{
"date": "2024-02-16T14:54:59",
"db": "PACKETSTORM",
"id": "177155"
},
{
"date": "2024-02-13T18:15:56.737000",
"db": "NVD",
"id": "CVE-2024-21386"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2024-02-13T00:00:00",
"db": "VULMON",
"id": "CVE-2024-21386"
},
{
"date": "2024-02-28T01:18:00",
"db": "JVNDB",
"id": "JVNDB-2024-002866"
},
{
"date": "2024-05-29T00:15:31.847000",
"db": "NVD",
"id": "CVE-2024-21386"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Microsoft\u0027s \u00a0Microsoft\u00a0Visual\u00a0Studio\u00a0 and \u00a0ASP.NET\u00a0Core\u00a0 Service operation interruption in \u00a0(DoS)\u00a0 Vulnerability Stated",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2024-002866"
}
],
"trust": 0.8
}
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.