{"id":"CVE-2024-21392","state":"PUBLISHED","title":".NET and Visual Studio Denial of Service Vulnerability","description":".NET and Visual Studio Denial of Service Vulnerability","publishedAt":"2024-03-12T16:57:42.012Z","updatedAt":"2025-05-03T00:47:15.780Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Microsoft Visual Studio 2022 version 17.9","Microsoft PowerShell 7.3","Microsoft PowerShell 7.4","Microsoft .NET 7.0","Microsoft .NET 8.0","Microsoft Microsoft Visual Studio 2022 version 17.6","Microsoft Microsoft Visual Studio 2022 version 17.4","Microsoft Microsoft Visual Studio 2022 version 17.8"],"affected":[{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.9","versions":[{"version":"17.0","status":"affected","lessThan":"17.9.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"PowerShell 7.3","versions":[{"version":"7.3.0","status":"affected","lessThan":"7.3.12","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"PowerShell 7.4","versions":[{"version":"7.4.0","status":"affected","lessThan":"7.4.1","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":".NET 7.0","versions":[{"version":"7.0.0","status":"affected","lessThan":"7.0.17","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"version":"8.0","status":"affected","lessThan":"8.0.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.6","versions":[{"version":"17.6.0","status":"affected","lessThan":"17.6.13","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.4","versions":[{"version":"17.4.0","status":"affected","lessThan":"17.4.17","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.8","versions":[{"version":"17.8.0","status":"affected","lessThan":"17.8.8","versionType":"custom"}],"platforms":["Unknown"]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21392"],"weaknesses":["CWE-400"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/21xxx/CVE-2024-21392.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-21392","state":"PUBLISHED","datePublished":"2024-03-12T16:57:42.012Z","dateUpdated":"2025-05-03T00:47:15.780Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2023-12-08T22:45:20.454Z"},"containers":{"cna":{"title":".NET and Visual Studio Denial of Service Vulnerability","descriptions":[{"lang":"en-US","value":".NET and Visual Studio Denial of Service Vulnerability"}],"affected":[{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.9","versions":[{"version":"17.0","status":"affected","lessThan":"17.9.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"PowerShell 7.3","versions":[{"version":"7.3.0","status":"affected","lessThan":"7.3.12","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"PowerShell 7.4","versions":[{"version":"7.4.0","status":"affected","lessThan":"7.4.1","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":".NET 7.0","versions":[{"version":"7.0.0","status":"affected","lessThan":"7.0.17","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":".NET 8.0","versions":[{"version":"8.0","status":"affected","lessThan":"8.0.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.6","versions":[{"version":"17.6.0","status":"affected","lessThan":"17.6.13","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.4","versions":[{"version":"17.4.0","status":"affected","lessThan":"17.4.17","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Microsoft Visual Studio 2022 version 17.8","versions":[{"version":"17.8.0","status":"affected","lessThan":"17.8.8","versionType":"custom"}],"platforms":["Unknown"]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21392","name":".NET and Visual Studio Denial of Service Vulnerability","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"HIGH","baseScore":7.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","description":"CWE-400: Uncontrolled Resource Consumption","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2025-05-03T00:47:15.780Z"},"datePublic":"2024-03-12T07:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*","versionStartIncluding":"17.0","versionEndExcluding":"17.9.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*","versionStartIncluding":"7.3.0","versionEndExcluding":"7.3.12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powershell:*:-:*:*:*:*:*:*","versionStartIncluding":"7.4.0","versionEndExcluding":"7.4.1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.0.17"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0","versionEndExcluding":"8.0.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*","versionStartIncluding":"17.6.0","versionEndExcluding":"17.6.13"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"17.4.0","versionEndExcluding":"17.4.17"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*","versionStartIncluding":"17.8.0","versionEndExcluding":"17.8.8"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-03-12T19:02:46.047938Z","id":"CVE-2024-21392","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-12T18:27:30.599Z"}},{"title":"CVE Program Container","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21392","name":".NET and Visual Studio Denial of Service Vulnerability","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T22:20:40.420Z"}}]}}}