CVE-2024-30045
.NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
.NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
- Record
CVE-2024-30045- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C - Weakness
- CWE-122
- Updated
- 2026-11-02
EUVDEUVD-2024-1487
.NET and Visual Studio Remote Code Execution Vulnerability
- Record
EUVD-2024-1487- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-7fcr-8qw6-92fr
Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability
Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability
<a name="executive-summary"></a>Executive summary
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
A Remote Code Execution vulnerability exists in .NET 7.0 and .NET 8.0 where a stack buffer overrun occurs in .NET Double Parse routine.
Discussion
Discussion for this issue can be found at https://github.com/dotnet/runtime/issues/102206
<a name="mitigation-factors"></a>Mitigation factors
Microsoft has not identified any mitigating factors for this vulnerability.
<a name="affected-software"></a>Affected software
- Any .NET 7.0 application running on .NET 7.0.18 or earlier.
- Any .NET 8.0 application running on .NET 8.0.4 or earlier.
<a name="affected-packages"></a>Affected Packages
The vulnerability affects any Microsoft .NET Core project if it uses any of affected packages versions listed below
<a name=".NET 7"></a>.NET 7
Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- Microsoft.NetCore.App.Runtime.linux-arm | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.linux-arm64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.linux-musl-arm | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.linux-musl-arm64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.linux-musl-x64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.linux-x64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.osx-arm64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.osx-x64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.win-arm | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.win-arm64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.win-x64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.win-x86 | <= 7.0.18 | 7.0.19
<a name=".NET 8"></a>.NET 8
Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- Microsoft.NetCore.App.Runtime.linux-arm | <= 8.0.4 | 8.0.5 Microsoft.NetCore.App.Runtime.linux-arm64 | <= 8.0.4 | 8.0.5 Microsoft.NetCore.App.Runtime.linux-musl-arm | <= 8.0.4 | 8.0.5 Microsoft.NetCore.App.Runtime.linux-musl-arm64 | <= 8.0.4 | 8.0.5 Microsoft.NetCore.App.Runtime.linux-musl-x64 | <= 8.0.4 | 8.0.5…
- Record
GHSA-7fcr-8qw6-92fr- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Weakness
- CWE-122
- Updated
- 2026-11-02
NVD
.NET and Visual Studio Remote Code Execution Vulnerability
- Record
CVE-2024-30045- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Weakness
- CWE-122
- Updated
- 2026-11-02
OSV
.NET and Visual Studio Remote Code Execution Vulnerability
- Record
CVE-2024-30045- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVGHSA-7fcr-8qw6-92fr
Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability
Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability
<a name="executive-summary"></a>Executive summary
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
A Remote Code Execution vulnerability exists in .NET 7.0 and .NET 8.0 where a stack buffer overrun occurs in .NET Double Parse routine.
Discussion
Discussion for this issue can be found at https://github.com/dotnet/runtime/issues/102206
<a name="mitigation-factors"></a>Mitigation factors
Microsoft has not identified any mitigating factors for this vulnerability.
<a name="affected-software"></a>Affected software
- Any .NET 7.0 application running on .NET 7.0.18 or earlier.
- Any .NET 8.0 application running on .NET 8.0.4 or earlier.
<a name="affected-packages"></a>Affected Packages
The vulnerability affects any Microsoft .NET Core project if it uses any of affected packages versions listed below
<a name=".NET 7"></a>.NET 7
Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- Microsoft.NetCore.App.Runtime.linux-arm | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.linux-arm64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.linux-musl-arm | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.linux-musl-arm64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.linux-musl-x64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.linux-x64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.osx-arm64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.osx-x64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.win-arm | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.win-arm64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.win-x64 | <= 7.0.18 | 7.0.19 Microsoft.NetCore.App.Runtime.win-x86 | <= 7.0.18 | 7.0.19
<a name=".NET 8"></a>.NET 8
Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- Microsoft.NetCore.App.Runtime.linux-arm | <= 8.0.4 | 8.0.5 Microsoft.NetCore.App.Runtime.linux-arm64 | <= 8.0.4 | 8.0.5 Microsoft.NetCore.App.Runtime.linux-musl-arm | <= 8.0.4 | 8.0.5 Microsoft.NetCore.App.Runtime.linux-musl-arm64 | <= 8.0.4 | 8.0.5 Microsoft.NetCore.App.Runtime.linux-musl-x64 | <= 8.0.4 | 8.0.5…
- Record
GHSA-7fcr-8qw6-92fr- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Weakness
- CWE-122
- Updated
- 2026-11-02
Show 17 moreShow less
OSVRHSA-2024:2842
Red Hat Security Advisory: .NET 8.0 security update
- Record
RHSA-2024:2842- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2024:2843
Red Hat Security Advisory: .NET 7.0 security update
- Record
RHSA-2024:2843- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:3340
Red Hat Security Advisory: .NET 7.0 security update
- Record
RHSA-2024:3340- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:3345
Red Hat Security Advisory: .NET 8.0 security update
- Record
RHSA-2024:3345- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRLSA-2024:2843
Important: .NET 7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.
Security Fix(es):
-
dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
-
dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:2843- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-30045
.NET and Visual Studio Remote Code Execution Vulnerability
- Record
UBUNTU-CVE-2024-30045- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVALSA-2024:2842 No score
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.
Security Fix(es):
- dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
- dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:2842- Updated
- 2026-11-02
OSVALSA-2024:2843 No score
Important: .NET 7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.
Security Fix(es):
- dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
- dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:2843- Updated
- 2026-11-05
OSVALSA-2024:3340 No score
Important: .NET 7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.
Security Fix(es):
- dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
- dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:3340- Updated
- 2026-11-06
OSVALSA-2024:3345 No score
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.
Security Fix(es):
- dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
- dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:3345- Updated
- 2026-11-02
OSVBIT-dotnet-2024-30045 No score
.NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
- Record
BIT-dotnet-2024-30045- Updated
- 2026-11-02
OSVBIT-dotnet-sdk-2024-30045 No score
.NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
- Record
BIT-dotnet-sdk-2024-30045- Updated
- 2026-11-02
OSVBIT-powershell-2024-30045 No score
.NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
- Record
BIT-powershell-2024-30045- Updated
- 2026-11-02
OSVRLSA-2024:2842 No score
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.
Security Fix(es):
-
dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
-
dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:2842- Updated
- 2026-11-02
OSVRLSA-2024:3340 No score
Important: .NET 7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.
Security Fix(es):
-
dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
-
dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:3340- Updated
- 2026-11-02
OSVRLSA-2024:3345 No score
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.
Security Fix(es):
-
dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
-
dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:3345- Updated
- 2026-11-02
OSVUSN-6773-1 No score
dotnet7, dotnet8 vulnerabilities
It was discovered that .NET did not properly handle memory in it's Double Parse routine. An attacker could possibly use this issue to achieve remote code execution. (CVE-2024-30045)
It was discovered that .NET did not properly handle the usage of a shared resource. An attacker could possibly use this to cause a dead-lock condition, resulting in a denial of service. (CVE-2024-30046)
- Record
USN-6773-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
Microsoft.NetCore.App.Runtime.linux-armNuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.NetCore.App.Runtime.linux-arm64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.NetCore.App.Runtime.linux-musl-arm64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.NetCore.App.Runtime.linux-musl-x64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.NetCore.App.Runtime.linux-x64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.NetCore.App.Runtime.osx-arm64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.NetCore.App.Runtime.osx-x64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.NetCore.App.Runtime.win-armNuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.NetCore.App.Runtime.win-arm64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.NetCore.App.Runtime.win-x64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Show 201 moreShow less
| Package | Affected | Fixed |
|---|---|---|
Microsoft.NetCore.App.Runtime.win-x86NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.NetCore.App.Runtime.linux-musl-armNuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.NetCore.App.Runtime.linux-armNuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.NetCore.App.Runtime.linux-arm64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.NetCore.App.Runtime.linux-musl-armNuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.NetCore.App.Runtime.linux-musl-x64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.NetCore.App.Runtime.linux-x64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.NetCore.App.Runtime.osx-arm64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.NetCore.App.Runtime.osx-x64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.NetCore.App.Runtime.win-armNuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.NetCore.App.Runtime.win-arm64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.NetCore.App.Runtime.win-x64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.NetCore.App.Runtime.win-x86NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.NetCore.App.Runtime.linux-musl-arm64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
aspnetcore-runtime-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
aspnetcore-runtime-dbg-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
aspnetcore-targeting-pack-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-apphost-pack-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-hostAlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-hostfxr-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-runtime-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-runtime-dbg-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-sdk-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.105-1.el9_4 | 8.0.105-1.el9_4 |
dotnet-sdk-8.0-source-built-artifactsAlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.105-1.el9_4 | 8.0.105-1.el9_4 |
dotnet-sdk-dbg-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.105-1.el9_4 | 8.0.105-1.el9_4 |
dotnet-targeting-pack-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-templates-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.105-1.el9_4 | 8.0.105-1.el9_4 |
netstandard-targeting-pack-2.1AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.105-1.el9_4 | 8.0.105-1.el9_4 |
aspnetcore-runtime-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.19-1.el9_4 | 7.0.19-1.el9_4 |
aspnetcore-targeting-pack-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.19-1.el9_4 | 7.0.19-1.el9_4 |
dotnet-apphost-pack-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.19-1.el9_4 | 7.0.19-1.el9_4 |
dotnet-hostfxr-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.19-1.el9_4 | 7.0.19-1.el9_4 |
dotnet-runtime-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.19-1.el9_4 | 7.0.19-1.el9_4 |
dotnet-sdk-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.119-1.el9_4 | 7.0.119-1.el9_4 |
dotnet-sdk-7.0-source-built-artifactsAlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.119-1.el9_4 | 7.0.119-1.el9_4 |
dotnet-targeting-pack-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.19-1.el9_4 | 7.0.19-1.el9_4 |
dotnet-templates-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.119-1.el9_4 | 7.0.119-1.el9_4 |
aspnetcore-runtime-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.19-1.el8_10 | 7.0.19-1.el8_10 |
aspnetcore-targeting-pack-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.19-1.el8_10 | 7.0.19-1.el8_10 |
dotnet-apphost-pack-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.19-1.el8_10 | 7.0.19-1.el8_10 |
dotnet-hostfxr-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.19-1.el8_10 | 7.0.19-1.el8_10 |
dotnet-runtime-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.19-1.el8_10 | 7.0.19-1.el8_10 |
dotnet-sdk-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.119-1.el8_10 | 7.0.119-1.el8_10 |
dotnet-sdk-7.0-source-built-artifactsAlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.119-1.el8_10 | 7.0.119-1.el8_10 |
dotnet-targeting-pack-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.19-1.el8_10 | 7.0.19-1.el8_10 |
dotnet-templates-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.119-1.el8_10 | 7.0.119-1.el8_10 |
aspnetcore-runtime-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
aspnetcore-runtime-dbg-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
aspnetcore-targeting-pack-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnetAlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.105-1.el8_10 | 8.0.105-1.el8_10 |
dotnet-apphost-pack-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnet-hostAlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnet-hostfxr-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnet-runtime-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnet-runtime-dbg-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnet-sdk-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.105-1.el8_10 | 8.0.105-1.el8_10 |
dotnet-sdk-8.0-source-built-artifactsAlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.105-1.el8_10 | 8.0.105-1.el8_10 |
dotnet-sdk-dbg-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.105-1.el8_10 | 8.0.105-1.el8_10 |
dotnet-targeting-pack-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnet-templates-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.105-1.el8_10 | 8.0.105-1.el8_10 |
netstandard-targeting-pack-2.1AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.105-1.el8_10 | 8.0.105-1.el8_10 |
dotnetBitnami |
7.0.0 up to 7.0.19, 8.0.0 up to 8.0.5 | 7.0.198.0.5 |
dotnet-sdkBitnami |
7.0.0 up to 7.0.19, 8.0.0 up to 8.0.5 | 7.0.198.0.5 |
powershellBitnami |
7.4.0 up to 7.4.3 | 7.4.3 |
Microsoft.NETCore.App.Runtime.linux-armNuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.NETCore.App.Runtime.linux-arm64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.NETCore.App.Runtime.linux-armNuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.NETCore.App.Runtime.linux-arm64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.NETCore.App.Runtime.linux-musl-armNuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.NETCore.App.Runtime.linux-musl-arm64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.NETCore.App.Runtime.linux-musl-x64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.NETCore.App.Runtime.linux-musl-x64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.NETCore.App.Runtime.linux-x64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.NETCore.App.Runtime.linux-x64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.NETCore.App.Runtime.osx-arm64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.NETCore.App.Runtime.osx-arm64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.NETCore.App.Runtime.osx-x64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.NETCore.App.Runtime.osx-x64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.NETCore.App.Runtime.win-armNuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.NETCore.App.Runtime.win-armNuGet |
8.0.0 up to 8.0.5 | 8.0.5 |
Microsoft.NETCore.App.Runtime.win-arm64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.NETCore.App.Runtime.win-arm64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.NETCore.App.Runtime.win-x64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.NETCore.App.Runtime.win-x64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.NETCore.App.Runtime.win-x86NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.NETCore.App.Runtime.win-x86NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.NETCore.App.Runtime.linux-musl-armNuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.NETCore.App.Runtime.linux-musl-arm64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
aspnetcore-runtime-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
aspnetcore-runtime-dbg-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
aspnetcore-targeting-pack-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-apphost-pack-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-apphost-pack-8.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-hostRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-host-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-hostfxr-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-hostfxr-8.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-runtime-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-runtime-8.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-runtime-dbg-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-sdk-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet-sdk-8.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet-sdk-dbg-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet-targeting-pack-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-templates-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet8.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet8.0-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
netstandard-targeting-pack-2.1Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet-apphost-pack-8.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-host-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-hostfxr-8.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-runtime-8.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-sdk-8.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet-sdk-8.0-source-built-artifactsRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet8.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet8.0-debugsourceRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
aspnetcore-runtime-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
aspnetcore-targeting-pack-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-apphost-pack-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-apphost-pack-7.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-hostfxr-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-hostfxr-7.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-runtime-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-runtime-7.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-sdk-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet-sdk-7.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet-targeting-pack-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-templates-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet7.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet7.0-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet-apphost-pack-7.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-hostfxr-7.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-runtime-7.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-sdk-7.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet-sdk-7.0-source-built-artifactsRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet7.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet7.0-debugsourceRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
aspnetcore-runtime-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
aspnetcore-targeting-pack-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-apphost-pack-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-apphost-pack-7.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-hostfxr-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-hostfxr-7.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-runtime-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-runtime-7.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-sdk-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet-sdk-7.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet-targeting-pack-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-templates-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet7.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet7.0-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet-apphost-pack-7.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-hostfxr-7.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-runtime-7.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-sdk-7.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet-sdk-7.0-source-built-artifactsRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet7.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet7.0-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
aspnetcore-runtime-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
aspnetcore-runtime-dbg-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
aspnetcore-targeting-pack-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnetRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet-apphost-pack-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-apphost-pack-8.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-hostRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-host-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-hostfxr-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-hostfxr-8.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-runtime-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-runtime-8.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-runtime-dbg-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-sdk-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet-sdk-8.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet-sdk-dbg-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet-targeting-pack-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-templates-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet8.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet8.0-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
netstandard-targeting-pack-2.1Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet-apphost-pack-8.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-host-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-hostfxr-8.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-runtime-8.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-sdk-8.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet-sdk-8.0-source-built-artifactsRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet8.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet8.0-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet8.0Rocky Linux:9 From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet7.0Rocky Linux:9 From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet7.0Rocky Linux:8 From an advisory covering 2 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet8.0Rocky Linux:8 From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet7Ubuntu:22.04:LTS |
before 7.0.119-0ubuntu1~22.04.1, plus listed versions 7.0.105-0ubuntu1~22.04.17.0.107-0ubuntu1~22.04.17.0.108-0ubuntu1~22.04.17.0.109-0ubuntu1~22.04.17.0.110-0ubuntu1~22.04.1 Show 8 moreShow less7.0.111-0ubuntu1~22.04.17.0.112-0ubuntu1~22.04.17.0.113-0ubuntu1~22.04.17.0.114-0ubuntu1~22.04.17.0.115-0ubuntu1~22.04.17.0.116-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.2 |
7.0.119-0ubuntu1~22.04.1 |
dotnet8Ubuntu:22.04:LTS |
before 8.0.105-8.0.5-0ubuntu1~22.04.1, plus listed versions 8.0.102-8.0.2-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.2 |
8.0.105-8.0.5-0ubuntu1~22.04.1 |
dotnet8Ubuntu:24.04:LTS |
before 8.0.105-8.0.5-0ubuntu1~24.04.1, plus listed versions 8.0.100-8.0.0~rc1-0ubuntu18.0.100-8.0.0~rc2-0ubuntu18.0.100-8.0.0~rc2-0ubuntu28.0.100-8.0.0-0ubuntu18.0.100-8.0.0-0ubuntu2 Show 6 moreShow less8.0.101-8.0.1-0ubuntu18.0.101-8.0.1-0ubuntu28.0.102-8.0.2-0ubuntu18.0.103-8.0.3-0ubuntu28.0.103-8.0.3-0ubuntu38.0.104-8.0.4-0ubuntu1 |
8.0.105-8.0.5-0ubuntu1~24.04.1 |
dotnet7Ubuntu:22.04:LTS From an advisory covering 2 CVEs |
before 7.0.119-0ubuntu1~22.04.1, plus listed versions 7.0.105-0ubuntu1~22.04.17.0.107-0ubuntu1~22.04.17.0.108-0ubuntu1~22.04.17.0.109-0ubuntu1~22.04.17.0.110-0ubuntu1~22.04.1 Show 8 moreShow less7.0.111-0ubuntu1~22.04.17.0.112-0ubuntu1~22.04.17.0.113-0ubuntu1~22.04.17.0.114-0ubuntu1~22.04.17.0.115-0ubuntu1~22.04.17.0.116-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.2 |
7.0.119-0ubuntu1~22.04.1 |
dotnet8Ubuntu:22.04:LTS From an advisory covering 2 CVEs |
before 8.0.105-8.0.5-0ubuntu1~22.04.1, plus listed versions 8.0.102-8.0.2-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.2 |
8.0.105-8.0.5-0ubuntu1~22.04.1 |
dotnet8Ubuntu:24.04:LTS From an advisory covering 2 CVEs |
before 8.0.105-8.0.5-0ubuntu1~24.04.1, plus listed versions 8.0.100-8.0.0~rc1-0ubuntu18.0.100-8.0.0~rc2-0ubuntu18.0.100-8.0.0~rc2-0ubuntu28.0.100-8.0.0-0ubuntu18.0.100-8.0.0-0ubuntu2 Show 6 moreShow less8.0.101-8.0.1-0ubuntu18.0.101-8.0.1-0ubuntu28.0.102-8.0.2-0ubuntu18.0.103-8.0.3-0ubuntu28.0.103-8.0.3-0ubuntu38.0.104-8.0.4-0ubuntu1 |
8.0.105-8.0.5-0ubuntu1~24.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | OSV | |
| facts, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-30045 is a medium vulnerability (CVSS 6.3) in Microsoft .net, published May 14, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.25%, the 69th percentile. Fixed in Microsoft.NetCore.App.Runtime.linux-arm 8.0.5.
References
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30045
security.netapp.com/advisory/ntap-20241122-0001
github.com/dotnet/runtime/security/advisories/GHSA-7fcr-8qw6-92fr
nvd.nist.gov/vuln/detail/CVE-2024-30045
Show 41 moreShow less
access.redhat.com/errata/RHSA-2024:2842
bugzilla.redhat.com/2279695
errata.almalinux.org/9/ALSA-2024-2842.html
redhat.com/security/data/cve/CVE-2024-21386.html
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2842.json
cve.org/CVERecord?id=CVE-2024-30045
errata.rockylinux.org/RLSA-2024:2842
ubuntu.com/security/CVE-2024-30045
Left out here: the rest of 2 source descriptions. The JSON record has them.