CVE-2024-30046
Visual Studio Denial of Service Vulnerability
Visual Studio Denial of Service Vulnerability
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Visual Studio Denial of Service Vulnerability
Visual Studio Denial of Service Vulnerability
- Record
CVE-2024-30046- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C - Weakness
- CWE-362
- Updated
- 2026-11-02
EUVDEUVD-2024-1648
Visual Studio Denial of Service Vulnerability
- Record
EUVD-2024-1648- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-hhc7-x9w4-cw47
Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability
<a name="executive-summary"></a>Executive summary
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0 and .NET 8.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
A Vulnerability exist in Microsoft.AspNetCore.Server.Kestrel.Core.dll where a dead-lock can occur resulting in Denial of Service.
Discussion
Discussion for this issue can be found at https://github.com/dotnet/aspnetcore/issues/55714
<a name="mitigation-factors"></a>Mitigation factors
Microsoft has not identified any mitigating factors for this vulnerability.
<a name="affected-software"></a>Affected software
- Any .NET 7.0 application running on .NET 7.0.18 or earlier.
- Any .NET 8.0 application running on .NET 8.0.4 or earlier.
<a name="affected-packages"></a>Affected Packages
The vulnerability affects any Microsoft .NET Core project if it uses any of affected packages versions listed below
<a name="ASP.NET 7"></a>ASP.NET 7
Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- Microsoft.AspNetCore.App.Runtime.linux-arm | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.linux-arm64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.linux-musl-arm | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.linux-x64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.osx-arm64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.osx-x64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.win-arm | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.win-arm64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.win-x64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.win-x86 | <= 7.0.18 | 7.0.19
<a name="ASP.NET 8"></a>ASP.NET 8
Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- Microsoft.AspNetCore.App.Runtime.linux-arm | <= 8.0.4 | 8.0.5 Microsoft.AspNetCore.App.Runtime.linux-arm64 | <= 8.0.4 | 8.0.5 Microsoft.AspNetCore.App.Runtime.linux-musl-arm | <= 8.0.4 | 8.0.5 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | <= 8.0.4 | 8.0.5…
- Record
GHSA-hhc7-x9w4-cw47- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-362
- Updated
- 2026-11-02
NVD
Visual Studio Denial of Service Vulnerability
- Record
CVE-2024-30046- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-362
- Updated
- 2026-11-02
OSV
Visual Studio Denial of Service Vulnerability
- Record
CVE-2024-30046- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVGHSA-hhc7-x9w4-cw47
Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability
<a name="executive-summary"></a>Executive summary
Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0 and .NET 8.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.
A Vulnerability exist in Microsoft.AspNetCore.Server.Kestrel.Core.dll where a dead-lock can occur resulting in Denial of Service.
Discussion
Discussion for this issue can be found at https://github.com/dotnet/aspnetcore/issues/55714
<a name="mitigation-factors"></a>Mitigation factors
Microsoft has not identified any mitigating factors for this vulnerability.
<a name="affected-software"></a>Affected software
- Any .NET 7.0 application running on .NET 7.0.18 or earlier.
- Any .NET 8.0 application running on .NET 8.0.4 or earlier.
<a name="affected-packages"></a>Affected Packages
The vulnerability affects any Microsoft .NET Core project if it uses any of affected packages versions listed below
<a name="ASP.NET 7"></a>ASP.NET 7
Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- Microsoft.AspNetCore.App.Runtime.linux-arm | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.linux-arm64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.linux-musl-arm | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.linux-musl-x64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.linux-x64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.osx-arm64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.osx-x64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.win-arm | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.win-arm64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.win-x64 | <= 7.0.18 | 7.0.19 Microsoft.AspNetCore.App.Runtime.win-x86 | <= 7.0.18 | 7.0.19
<a name="ASP.NET 8"></a>ASP.NET 8
Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- Microsoft.AspNetCore.App.Runtime.linux-arm | <= 8.0.4 | 8.0.5 Microsoft.AspNetCore.App.Runtime.linux-arm64 | <= 8.0.4 | 8.0.5 Microsoft.AspNetCore.App.Runtime.linux-musl-arm | <= 8.0.4 | 8.0.5 Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 | <= 8.0.4 | 8.0.5…
- Record
GHSA-hhc7-x9w4-cw47- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-362
- Updated
- 2026-11-02
Show 16 moreShow less
OSVRHSA-2024:2842
Red Hat Security Advisory: .NET 8.0 security update
- Record
RHSA-2024:2842- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2024:2843
Red Hat Security Advisory: .NET 7.0 security update
- Record
RHSA-2024:2843- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:3340
Red Hat Security Advisory: .NET 7.0 security update
- Record
RHSA-2024:3340- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:3345
Red Hat Security Advisory: .NET 8.0 security update
- Record
RHSA-2024:3345- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVRLSA-2024:2843
Important: .NET 7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.
Security Fix(es):
-
dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
-
dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:2843- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-30046
Visual Studio Denial of Service Vulnerability
- Record
UBUNTU-CVE-2024-30046- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2024:2842 No score
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.
Security Fix(es):
- dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
- dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:2842- Updated
- 2026-11-02
OSVALSA-2024:2843 No score
Important: .NET 7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.
Security Fix(es):
- dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
- dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:2843- Updated
- 2026-11-05
OSVALSA-2024:3340 No score
Important: .NET 7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.
Security Fix(es):
- dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
- dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:3340- Updated
- 2026-11-06
OSVALSA-2024:3345 No score
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.
Security Fix(es):
- dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
- dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:3345- Updated
- 2026-11-02
OSVBIT-dotnet-2024-30046 No score
Visual Studio Denial of Service Vulnerability
Visual Studio Denial of Service Vulnerability
- Record
BIT-dotnet-2024-30046- Updated
- 2026-11-02
OSVBIT-dotnet-sdk-2024-30046 No score
Visual Studio Denial of Service Vulnerability
Visual Studio Denial of Service Vulnerability
- Record
BIT-dotnet-sdk-2024-30046- Updated
- 2026-11-02
OSVRLSA-2024:2842 No score
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.
Security Fix(es):
-
dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
-
dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:2842- Updated
- 2026-11-02
OSVRLSA-2024:3340 No score
Important: .NET 7.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 7.0.119 and .NET Runtime 7.0.19.
Security Fix(es):
-
dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
-
dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:3340- Updated
- 2026-11-02
OSVRLSA-2024:3345 No score
Important: .NET 8.0 security update
.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation.
New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 8.0.105 and .NET Runtime 8.0.5.
Security Fix(es):
-
dotnet: stack buffer overrun in Double Parse (CVE-2024-30045)
-
dotnet: denial of service in ASP.NET Core due to deadlock in Http2OutputProducer.Stop() (CVE-2024-30046)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:3345- Updated
- 2026-11-02
OSVUSN-6773-1 No score
dotnet7, dotnet8 vulnerabilities
It was discovered that .NET did not properly handle memory in it's Double Parse routine. An attacker could possibly use this issue to achieve remote code execution. (CVE-2024-30045)
It was discovered that .NET did not properly handle the usage of a shared resource. An attacker could possibly use this to cause a dead-lock condition, resulting in a denial of service. (CVE-2024-30046)
- Record
USN-6773-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.AspNetCore.App.Runtime.osx-arm64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Show 200 moreShow less
| Package | Affected | Fixed |
|---|---|---|
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
8.0.0 to 8.0.4 | 8.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.AspNetCore.App.Runtime.osx-arm64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
7.0.0 to 7.0.18 | 7.0.19 |
aspnetcore-runtime-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
aspnetcore-runtime-dbg-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
aspnetcore-targeting-pack-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-apphost-pack-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-hostAlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-hostfxr-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-runtime-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-runtime-dbg-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-sdk-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.105-1.el9_4 | 8.0.105-1.el9_4 |
dotnet-sdk-8.0-source-built-artifactsAlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.105-1.el9_4 | 8.0.105-1.el9_4 |
dotnet-sdk-dbg-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.105-1.el9_4 | 8.0.105-1.el9_4 |
dotnet-targeting-pack-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.5-1.el9_4 | 8.0.5-1.el9_4 |
dotnet-templates-8.0AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.105-1.el9_4 | 8.0.105-1.el9_4 |
netstandard-targeting-pack-2.1AlmaLinux:9 From an advisory covering 2 CVEs |
before 8.0.105-1.el9_4 | 8.0.105-1.el9_4 |
aspnetcore-runtime-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.19-1.el9_4 | 7.0.19-1.el9_4 |
aspnetcore-targeting-pack-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.19-1.el9_4 | 7.0.19-1.el9_4 |
dotnet-apphost-pack-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.19-1.el9_4 | 7.0.19-1.el9_4 |
dotnet-hostfxr-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.19-1.el9_4 | 7.0.19-1.el9_4 |
dotnet-runtime-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.19-1.el9_4 | 7.0.19-1.el9_4 |
dotnet-sdk-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.119-1.el9_4 | 7.0.119-1.el9_4 |
dotnet-sdk-7.0-source-built-artifactsAlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.119-1.el9_4 | 7.0.119-1.el9_4 |
dotnet-targeting-pack-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.19-1.el9_4 | 7.0.19-1.el9_4 |
dotnet-templates-7.0AlmaLinux:9 From an advisory covering 4 CVEs |
before 7.0.119-1.el9_4 | 7.0.119-1.el9_4 |
aspnetcore-runtime-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.19-1.el8_10 | 7.0.19-1.el8_10 |
aspnetcore-targeting-pack-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.19-1.el8_10 | 7.0.19-1.el8_10 |
dotnet-apphost-pack-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.19-1.el8_10 | 7.0.19-1.el8_10 |
dotnet-hostfxr-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.19-1.el8_10 | 7.0.19-1.el8_10 |
dotnet-runtime-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.19-1.el8_10 | 7.0.19-1.el8_10 |
dotnet-sdk-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.119-1.el8_10 | 7.0.119-1.el8_10 |
dotnet-sdk-7.0-source-built-artifactsAlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.119-1.el8_10 | 7.0.119-1.el8_10 |
dotnet-targeting-pack-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.19-1.el8_10 | 7.0.19-1.el8_10 |
dotnet-templates-7.0AlmaLinux:8 From an advisory covering 4 CVEs |
before 7.0.119-1.el8_10 | 7.0.119-1.el8_10 |
aspnetcore-runtime-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
aspnetcore-runtime-dbg-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
aspnetcore-targeting-pack-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnetAlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.105-1.el8_10 | 8.0.105-1.el8_10 |
dotnet-apphost-pack-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnet-hostAlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnet-hostfxr-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnet-runtime-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnet-runtime-dbg-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnet-sdk-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.105-1.el8_10 | 8.0.105-1.el8_10 |
dotnet-sdk-8.0-source-built-artifactsAlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.105-1.el8_10 | 8.0.105-1.el8_10 |
dotnet-sdk-dbg-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.105-1.el8_10 | 8.0.105-1.el8_10 |
dotnet-targeting-pack-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.5-1.el8_10 | 8.0.5-1.el8_10 |
dotnet-templates-8.0AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.105-1.el8_10 | 8.0.105-1.el8_10 |
netstandard-targeting-pack-2.1AlmaLinux:8 From an advisory covering 2 CVEs |
before 8.0.105-1.el8_10 | 8.0.105-1.el8_10 |
dotnetBitnami |
7.0.0 up to 7.0.19, 8.0.0 up to 8.0.5 | 7.0.198.0.5 |
dotnet-sdkBitnami |
7.0.0 up to 7.0.19, 8.0.0 up to 8.0.5 | 7.0.198.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.AspNetCore.App.Runtime.linux-armNuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-musl-armNuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.AspNetCore.App.Runtime.linux-musl-x64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.AspNetCore.App.Runtime.linux-x64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.AspNetCore.App.Runtime.osx-arm64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.AspNetCore.App.Runtime.osx-arm64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.AspNetCore.App.Runtime.osx-x64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.AspNetCore.App.Runtime.win-armNuGet |
8.0.0 up to 8.0.5 | 8.0.5 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.AspNetCore.App.Runtime.win-arm64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.AspNetCore.App.Runtime.win-x64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
7.0.0 up to 7.0.19, plus listed versions 7.0.17.0.107.0.117.0.127.0.13 Show 12 moreShow less7.0.147.0.157.0.167.0.177.0.187.0.27.0.37.0.47.0.57.0.77.0.87.0.9 |
7.0.19 |
Microsoft.AspNetCore.App.Runtime.win-x86NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
Microsoft.AspNetCore.App.Runtime.linux-arm64NuGet |
8.0.0 up to 8.0.5, plus listed versions 8.0.18.0.28.0.38.0.4 |
8.0.5 |
aspnetcore-runtime-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
aspnetcore-runtime-dbg-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
aspnetcore-targeting-pack-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-apphost-pack-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-apphost-pack-8.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-hostRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-host-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-hostfxr-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-hostfxr-8.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-runtime-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-runtime-8.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-runtime-dbg-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-sdk-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet-sdk-8.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet-sdk-dbg-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet-targeting-pack-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-templates-8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet8.0Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet8.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet8.0-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
netstandard-targeting-pack-2.1Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet-apphost-pack-8.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-host-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-hostfxr-8.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-runtime-8.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el9_4 | 0:8.0.5-1.el9_4 |
dotnet-sdk-8.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet-sdk-8.0-source-built-artifactsRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet8.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet8.0-debugsourceRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
aspnetcore-runtime-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
aspnetcore-targeting-pack-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-apphost-pack-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-apphost-pack-7.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-hostfxr-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-hostfxr-7.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-runtime-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-runtime-7.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-sdk-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet-sdk-7.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet-targeting-pack-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-templates-7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet7.0Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet7.0-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet7.0-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet-apphost-pack-7.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-hostfxr-7.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-runtime-7.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.19-1.el9_4 | 0:7.0.19-1.el9_4 |
dotnet-sdk-7.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet-sdk-7.0-source-built-artifactsRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet7.0-debuginfoRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet7.0-debugsourceRed Hat:enterprise_linux:9::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
aspnetcore-runtime-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
aspnetcore-targeting-pack-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-apphost-pack-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-apphost-pack-7.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-hostfxr-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-hostfxr-7.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-runtime-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-runtime-7.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-sdk-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet-sdk-7.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet-targeting-pack-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-templates-7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet7.0Red Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet7.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet7.0-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet-apphost-pack-7.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-hostfxr-7.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-runtime-7.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.19-1.el8_10 | 0:7.0.19-1.el8_10 |
dotnet-sdk-7.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet-sdk-7.0-source-built-artifactsRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet7.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet7.0-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 4 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
aspnetcore-runtime-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
aspnetcore-runtime-dbg-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
aspnetcore-targeting-pack-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnetRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet-apphost-pack-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-apphost-pack-8.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-hostRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-host-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-hostfxr-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-hostfxr-8.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-runtime-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-runtime-8.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-runtime-dbg-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-sdk-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet-sdk-8.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet-sdk-dbg-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet-targeting-pack-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-templates-8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet8.0Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet8.0-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet8.0-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
netstandard-targeting-pack-2.1Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet-apphost-pack-8.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-host-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-hostfxr-8.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-runtime-8.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.5-1.el8_10 | 0:8.0.5-1.el8_10 |
dotnet-sdk-8.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet-sdk-8.0-source-built-artifactsRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet8.0-debuginfoRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet8.0-debugsourceRed Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet8.0Rocky Linux:9 From an advisory covering 2 CVEs |
before 0:8.0.105-1.el9_4 | 0:8.0.105-1.el9_4 |
dotnet7.0Rocky Linux:9 From an advisory covering 4 CVEs |
before 0:7.0.119-1.el9_4 | 0:7.0.119-1.el9_4 |
dotnet7.0Rocky Linux:8 From an advisory covering 2 CVEs |
before 0:7.0.119-1.el8_10 | 0:7.0.119-1.el8_10 |
dotnet8.0Rocky Linux:8 From an advisory covering 2 CVEs |
before 0:8.0.105-1.el8_10 | 0:8.0.105-1.el8_10 |
dotnet7Ubuntu:22.04:LTS |
before 7.0.119-0ubuntu1~22.04.1, plus listed versions 7.0.105-0ubuntu1~22.04.17.0.107-0ubuntu1~22.04.17.0.108-0ubuntu1~22.04.17.0.109-0ubuntu1~22.04.17.0.110-0ubuntu1~22.04.1 Show 8 moreShow less7.0.111-0ubuntu1~22.04.17.0.112-0ubuntu1~22.04.17.0.113-0ubuntu1~22.04.17.0.114-0ubuntu1~22.04.17.0.115-0ubuntu1~22.04.17.0.116-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.2 |
7.0.119-0ubuntu1~22.04.1 |
dotnet8Ubuntu:22.04:LTS |
before 8.0.105-8.0.5-0ubuntu1~22.04.1, plus listed versions 8.0.102-8.0.2-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.2 |
8.0.105-8.0.5-0ubuntu1~22.04.1 |
dotnet8Ubuntu:24.04:LTS |
before 8.0.105-8.0.5-0ubuntu1~24.04.1, plus listed versions 8.0.100-8.0.0~rc1-0ubuntu18.0.100-8.0.0~rc2-0ubuntu18.0.100-8.0.0~rc2-0ubuntu28.0.100-8.0.0-0ubuntu18.0.100-8.0.0-0ubuntu2 Show 6 moreShow less8.0.101-8.0.1-0ubuntu18.0.101-8.0.1-0ubuntu28.0.102-8.0.2-0ubuntu18.0.103-8.0.3-0ubuntu28.0.103-8.0.3-0ubuntu38.0.104-8.0.4-0ubuntu1 |
8.0.105-8.0.5-0ubuntu1~24.04.1 |
dotnet7Ubuntu:22.04:LTS From an advisory covering 2 CVEs |
before 7.0.119-0ubuntu1~22.04.1, plus listed versions 7.0.105-0ubuntu1~22.04.17.0.107-0ubuntu1~22.04.17.0.108-0ubuntu1~22.04.17.0.109-0ubuntu1~22.04.17.0.110-0ubuntu1~22.04.1 Show 8 moreShow less7.0.111-0ubuntu1~22.04.17.0.112-0ubuntu1~22.04.17.0.113-0ubuntu1~22.04.17.0.114-0ubuntu1~22.04.17.0.115-0ubuntu1~22.04.17.0.116-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.17.0.117-0ubuntu1~22.04.2 |
7.0.119-0ubuntu1~22.04.1 |
dotnet8Ubuntu:22.04:LTS From an advisory covering 2 CVEs |
before 8.0.105-8.0.5-0ubuntu1~22.04.1, plus listed versions 8.0.102-8.0.2-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.18.0.103-8.0.3-0ubuntu1~22.04.2 |
8.0.105-8.0.5-0ubuntu1~22.04.1 |
dotnet8Ubuntu:24.04:LTS From an advisory covering 2 CVEs |
before 8.0.105-8.0.5-0ubuntu1~24.04.1, plus listed versions 8.0.100-8.0.0~rc1-0ubuntu18.0.100-8.0.0~rc2-0ubuntu18.0.100-8.0.0~rc2-0ubuntu28.0.100-8.0.0-0ubuntu18.0.100-8.0.0-0ubuntu2 Show 6 moreShow less8.0.101-8.0.1-0ubuntu18.0.101-8.0.1-0ubuntu28.0.102-8.0.2-0ubuntu18.0.103-8.0.3-0ubuntu28.0.103-8.0.3-0ubuntu38.0.104-8.0.4-0ubuntu1 |
8.0.105-8.0.5-0ubuntu1~24.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | OSV | |
| facts, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-30046 is a medium vulnerability (CVSS 5.9) in Microsoft .net, published May 14, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.69%, the 77th percentile. Fixed in Microsoft.AspNetCore.App.Runtime.linux-arm 8.0.5.
References
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30046
github.com/dotnet/aspnetcore/security/advisories/GHSA-hhc7-x9w4-cw47
nvd.nist.gov/vuln/detail/CVE-2024-30046
Show 40 moreShow less
access.redhat.com/errata/RHSA-2024:2842
bugzilla.redhat.com/2279695
errata.almalinux.org/9/ALSA-2024-2842.html
redhat.com/security/data/cve/CVE-2024-21386.html
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2842.json
cve.org/CVERecord?id=CVE-2024-30045
errata.rockylinux.org/RLSA-2024:2842
ubuntu.com/security/CVE-2024-30046
Left out here: the rest of 2 source descriptions. The JSON record has them.