CVE-2024-43484

Summary

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Affected Software

VendorProductVersion RangeStatus
Microsoft.NET 6.06.0.0 < 6.0.35affected
Microsoft.NET 8.08.0.0 < 8.0.10affected
MicrosoftMicrosoft .NET Framework 2.0 Service Pack 22.0.0 < 3.0.30729.8974affected
MicrosoftMicrosoft .NET Framework 3.0 Service Pack 23.0.0 < 3.0.30729.8974affected
MicrosoftMicrosoft .NET Framework 3.53.5.0 < 3.5.30729.8973affected
MicrosoftMicrosoft .NET Framework 3.5 AND 4.7.24.7.0 < 4.7.04115.01affected
MicrosoftMicrosoft .NET Framework 3.5 AND 4.84.8.0 < 4.8.04762.01affected
MicrosoftMicrosoft .NET Framework 3.5 AND 4.8.14.8.1 < 4.8.1.9277.03affected
MicrosoftMicrosoft .NET Framework 3.5.13.5.0 < 3.5.1.30729.8974affected
MicrosoftMicrosoft .NET Framework 4.6.24.7.0 < 4.7.04115.01affected
MicrosoftMicrosoft .NET Framework 4.6.2/4.7/4.7.1/4.7.24.7.0 < 4.7.04115.01affected
MicrosoftMicrosoft .NET Framework 4.6/4.6.210.0.0.0 < 10.0.10240.20796affected
MicrosoftMicrosoft .NET Framework 4.84.8.0 < 4.8.04762.01affected
MicrosoftMicrosoft Visual Studio 2022 version 17.1017.10 < 17.10.8affected
MicrosoftMicrosoft Visual Studio 2022 version 17.1117.11 < 17.11.5affected
MicrosoftMicrosoft Visual Studio 2022 version 17.617.6.0 < 17.6.20affected
MicrosoftMicrosoft Visual Studio 2022 version 17.817.8.0 < 17.8.15affected
MicrosoftPowerShell 7.27.2.0 < 7.2.24affected
MicrosoftPowerShell 7.47.4.0 < 7.4.6affected

Weaknesses

  • CWE-407: CWE-407: Inefficient Algorithmic Complexity
  • CWE-789: CWE-789: Memory Allocation with Excessive Size Value

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

CVE Program Container

Additional References

References