CVE-2024-21386

CVE-2024-21386

• CWE-400 — CWE-400: Uncontrolled Resource Consumption

• Microsoft / ASP.NET Core 6.0 — v=6.0 <6.0.27 [affected]
• Microsoft / ASP.NET Core 7.0 — v=7.0.0 <7.0.16 [affected]
• Microsoft / ASP.NET Core 8.0 — v=8.0 <8.0.2 [affected]
• Microsoft / Microsoft Visual Studio 2022 version 17.4 — v=17.4.0 <17.4.16 [affected]
• Microsoft / Microsoft Visual Studio 2022 version 17.6 — v=17.6.0 <17.6.12 [affected]
• Microsoft / Microsoft Visual Studio 2022 version 17.8 — v=17.8.0 <17.8.7 [affected]

• 3.1 score=7.5 severity=HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21386 vendor-advisory