Upstream information

CVE-2024-43485 at MITRE

Description

.NET and Visual Studio Denial of Service Vulnerability

SUSE information

Overall state of this security issue: Does not affect SUSE products

This issue is currently rated as having important severity.

CVSS v3 Scores
	CNA (Microsoft)
Base Score	7.5
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector	Network
Attack Complexity	Low
Privileges Required	None
User Interaction	None
Scope	Unchanged
Confidentiality Impact	None
Integrity Impact	None
Availability Impact	High
CVSSv3 Version	3.1

No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

RHSA-2024:7851, published Thu Oct 10 15:05:49 UTC 2024
RHSA-2024:7867, published Fri Oct 11 15:05:41 UTC 2024
RHSA-2024:7868, published Thu Oct 10 15:05:49 UTC 2024
RHSA-2024:7869, published Thu Oct 10 15:05:48 UTC 2024

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Liberty Linux 8	`aspnetcore-runtime-6.0 >= 6.0.35-1.el8_10` `aspnetcore-runtime-8.0 >= 8.0.10-1.el8_10` `aspnetcore-runtime-dbg-8.0 >= 8.0.10-1.el8_10` `aspnetcore-targeting-pack-6.0 >= 6.0.35-1.el8_10` `aspnetcore-targeting-pack-8.0 >= 8.0.10-1.el8_10` `dotnet >= 8.0.110-1.el8_10` `dotnet-apphost-pack-6.0 >= 6.0.35-1.el8_10` `dotnet-apphost-pack-8.0 >= 8.0.10-1.el8_10` `dotnet-host >= 8.0.10-1.el8_10` `dotnet-hostfxr-6.0 >= 6.0.35-1.el8_10` `dotnet-hostfxr-8.0 >= 8.0.10-1.el8_10` `dotnet-runtime-6.0 >= 6.0.35-1.el8_10` `dotnet-runtime-8.0 >= 8.0.10-1.el8_10` `dotnet-runtime-dbg-8.0 >= 8.0.10-1.el8_10` `dotnet-sdk-6.0 >= 6.0.135-1.el8_10` `dotnet-sdk-6.0-source-built-artifacts >= 6.0.135-1.el8_10` `dotnet-sdk-8.0 >= 8.0.110-1.el8_10` `dotnet-sdk-8.0-source-built-artifacts >= 8.0.110-1.el8_10` `dotnet-sdk-dbg-8.0 >= 8.0.110-1.el8_10` `dotnet-targeting-pack-6.0 >= 6.0.35-1.el8_10` `dotnet-targeting-pack-8.0 >= 8.0.10-1.el8_10` `dotnet-templates-6.0 >= 6.0.135-1.el8_10` `dotnet-templates-8.0 >= 8.0.110-1.el8_10` `netstandard-targeting-pack-2.1 >= 8.0.110-1.el8_10`	Patchnames: RHSA-2024:7851 RHSA-2024:7868
SUSE Liberty Linux 9	`aspnetcore-runtime-6.0 >= 6.0.35-1.el9_4` `aspnetcore-runtime-8.0 >= 8.0.10-1.el9_4` `aspnetcore-runtime-dbg-8.0 >= 8.0.10-1.el9_4` `aspnetcore-targeting-pack-6.0 >= 6.0.35-1.el9_4` `aspnetcore-targeting-pack-8.0 >= 8.0.10-1.el9_4` `dotnet-apphost-pack-6.0 >= 6.0.35-1.el9_4` `dotnet-apphost-pack-8.0 >= 8.0.10-1.el9_4` `dotnet-host >= 8.0.10-1.el9_4` `dotnet-hostfxr-6.0 >= 6.0.35-1.el9_4` `dotnet-hostfxr-8.0 >= 8.0.10-1.el9_4` `dotnet-runtime-6.0 >= 6.0.35-1.el9_4` `dotnet-runtime-8.0 >= 8.0.10-1.el9_4` `dotnet-runtime-dbg-8.0 >= 8.0.10-1.el9_4` `dotnet-sdk-6.0 >= 6.0.135-1.el9_4` `dotnet-sdk-6.0-source-built-artifacts >= 6.0.135-1.el9_4` `dotnet-sdk-8.0 >= 8.0.110-1.el9_4` `dotnet-sdk-8.0-source-built-artifacts >= 8.0.110-1.el9_4` `dotnet-sdk-dbg-8.0 >= 8.0.110-1.el9_4` `dotnet-targeting-pack-6.0 >= 6.0.35-1.el9_4` `dotnet-targeting-pack-8.0 >= 8.0.10-1.el9_4` `dotnet-templates-6.0 >= 6.0.135-1.el9_4` `dotnet-templates-8.0 >= 8.0.110-1.el9_4` `netstandard-targeting-pack-2.1 >= 8.0.110-1.el9_4`	Patchnames: RHSA-2024:7867 RHSA-2024:7869

SUSE Timeline for this CVE

CVE page created: Tue Oct 8 20:00:22 2024
CVE page last modified: Fri Oct 11 19:53:31 2024