Home > Vulnerability Database > CVE-2024-43484

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2024-43484

Good to know:

Date: October 8, 2024

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Language: C#

Severity Score

7.5

Related Resources (9)

Url: https://security.netapp.com/advisory/ntap-20250328-0007

Url: https://github.com/dotnet/runtime/security/advisories/GHSA-f32c-w444-8ppv

Url: https://github.com/dotnet/runtime/issues/108676

Url: https://nvd.nist.gov/vuln/detail/CVE-2024-43484

Url: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43484

Url: https://security.netapp.com/advisory/ntap-20250328-0007/

Url: https://github.com/dotnet/announcements/issues/328

Url: https://github.com/dotnet/runtime

Url: https://www.mend.io/vulnerability-database/CVE-2024-43484

Severity Score

7.5

Weakness Type (CWE)

Inefficient Algorithmic Complexity

CWE-407

Memory Allocation with Excessive Size Value

CWE-789

Top Fix

Upgrade Version

Upgrade to version System.IO.Packaging - 9.0.0-rc.2.24473.5;System.IO.Packaging - 8.0.1;System.IO.Packaging - 6.0.1

CVSS v3.1

Base Score:	7.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	HIGH

Do you need more information?

Contact Us