{"id":"CVE-2024-21319","state":"PUBLISHED","title":"Microsoft Identity Denial of service vulnerability","description":"Microsoft Identity Denial of service vulnerability","publishedAt":"2024-01-09T18:59:01.270Z","updatedAt":"2025-06-03T14:29:52.502Z","severity":{"score":6.8,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft .NET 6.0","Microsoft Microsoft Visual Studio 2022 version 17.2","Microsoft Microsoft Visual Studio 2022 version 17.6","Microsoft Microsoft Visual Studio 2022 version 17.4","Microsoft Microsoft Visual Studio 2022 version 17.8","Microsoft .NET 7.0","Microsoft .NET 8.0","Microsoft Microsoft Identity Model v6.0.0 forNuget","Microsoft Microsoft Identity Model v7.0.0 for Nuget","Microsoft Microsoft Identity Model v6.0.0","Microsoft Microsoft Identity Model v5.0.0","Microsoft Microsoft Identity Model v7.0.0","Microsoft Microsoft Identity Model v5.0.0 for Nuget"],"affected":[{"vendor":"Microsoft","product":".NET 6.0","versions":[{"version":"6.0.0","status":"affected","lessThan":"6.0.26","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.2","versions":[{"version":"17.2.0","status":"affected","lessThan":"17.2.23","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.6","versions":[{"version":"17.6.0","status":"affected","lessThan":"17.6.11","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.4","versions":[{"version":"17.4.0","status":"affected","lessThan":"17.4.15","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.8","versions":[{"version":"17.8.0","status":"affected","lessThan":"17.8.4","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":".NET 7.0","versions":[{"version":"7.0.0","status":"affected","lessThan":"7.0.15","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"version":"8.0","status":"affected","lessThan":"8.0.1","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Identity Model v6.0.0 forNuget","versions":[{"version":"6.0","status":"affected","lessThan":"6.34.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Identity Model v7.0.0 for Nuget","versions":[{"version":"7.0","status":"affected","lessThan":"7.1.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Identity Model v6.0.0","versions":[{"version":"6.0","status":"affected","lessThan":"6.34.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Identity Model v5.0.0","versions":[{"version":"5.0","status":"affected","lessThan":"5.7.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Identity Model v7.0.0","versions":[{"version":"7.0","status":"affected","lessThan":"7.1.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Identity Model v5.0.0 for Nuget","versions":[{"version":"5.0","status":"affected","lessThan":"5.7.0","versionType":"custom"}],"platforms":["Unknown"]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21319"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/21xxx/CVE-2024-21319.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-21319","state":"PUBLISHED","datePublished":"2024-01-09T18:59:01.270Z","dateUpdated":"2025-06-03T14:29:52.502Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2023-12-08T22:45:19.367Z"},"containers":{"cna":{"title":"Microsoft Identity Denial of service vulnerability","descriptions":[{"lang":"en-US","value":"Microsoft Identity Denial of service vulnerability"}],"affected":[{"vendor":"Microsoft","product":".NET 6.0","versions":[{"version":"6.0.0","status":"affected","lessThan":"6.0.26","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.2","versions":[{"version":"17.2.0","status":"affected","lessThan":"17.2.23","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.6","versions":[{"version":"17.6.0","status":"affected","lessThan":"17.6.11","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.4","versions":[{"version":"17.4.0","status":"affected","lessThan":"17.4.15","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.8","versions":[{"version":"17.8.0","status":"affected","lessThan":"17.8.4","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":".NET 7.0","versions":[{"version":"7.0.0","status":"affected","lessThan":"7.0.15","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"version":"8.0","status":"affected","lessThan":"8.0.1","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Identity Model v6.0.0 forNuget","versions":[{"version":"6.0","status":"affected","lessThan":"6.34.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Identity Model v7.0.0 for Nuget","versions":[{"version":"7.0","status":"affected","lessThan":"7.1.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Identity Model v6.0.0","versions":[{"version":"6.0","status":"affected","lessThan":"6.34.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Identity Model v5.0.0","versions":[{"version":"5.0","status":"affected","lessThan":"5.7.0","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Identity Model v7.0.0","versions":[{"version":"7.0","status":"affected","lessThan":"7.1.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Identity Model v5.0.0 for Nuget","versions":[{"version":"5.0","status":"affected","lessThan":"5.7.0","versionType":"custom"}],"platforms":["Unknown"]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21319","name":"Microsoft Identity Denial of service vulnerability","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"MEDIUM","baseScore":6.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20: Improper Input Validation","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2025-05-03T01:46:56.518Z"},"datePublic":"2024-01-09T08:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.26"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"17.2.0","versionEndExcluding":"17.2.23"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*","versionStartIncluding":"17.6.0","versionEndExcluding":"17.6.11"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"17.4.0","versionEndExcluding":"17.4.15"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*","versionStartIncluding":"17.8.0","versionEndExcluding":"17.8.4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.15"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndExcluding":"8.0.1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:identitymodel_for_nuget:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.34.0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:identitymodel_for_nuget:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndExcluding":"7.1.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:identitymodel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndExcluding":"6.34.0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:identitymodel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.7.0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:identitymodel:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndExcluding":"7.1.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:identitymodel_for_nuget:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0","versionEndExcluding":"5.7.0"}]}]}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21319","name":"Microsoft Identity Denial of service vulnerability","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T22:20:39.921Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-08T15:56:18.714850Z","id":"CVE-2024-21319","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-03T14:29:52.502Z"}}]}}}