INFSA-2024:2843: .NET 7.0 security update
Information about definition
Identificator: INFSA-2024:2843
Type: security
Release date: 2024-12-27 09:25:58 UTC
Information about package
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available.
Vulnerabilities description
- CVE-2024-30045
.NET and Visual Studio Remote Code Execution Vulnerability
- CVE-2024-30046
Visual Studio Denial of Service Vulnerability
Severity level
| CVE | Score CVSS 2.0 | Score CVSS 3.x | Score CVSS 4.0 |
|---|---|---|---|
|
NIST — CVE-2024-30045
|
no information | 6.3 | no information |
|
NIST — CVE-2024-30046
|
no information | 5.9 | no information |
Updated packages