Red Hat Security Advisory: .NET 7.0 security update
.NET 7.0 framework for Red Hat Enterprise Linux has security vulnerabilities including a stack buffer overrun in Double Parse and a denial of service in ASP.NET Core due to a deadlock. Updated versions .NET SDK 7.0.119 and .NET Runtime 7.0.19 address these issues. The advisory rates the impact as Important. No CVSS score is provided in the source data.
AI Analysis
Technical Summary
This security advisory from Red Hat addresses multiple vulnerabilities in the .NET 7.0 framework, specifically a stack buffer overrun in the Double Parse function (CVE-2024-30045) and a denial of service vulnerability in ASP.NET Core caused by a deadlock in Http2OutputProducer.Stop() (CVE-2024-30046). The update includes .NET SDK 7.0.119 and .NET Runtime 7.0.19 which fix these issues. The advisory also references additional CVEs (CVE-2024-21386, CVE-2024-21404) related to the update. The vulnerabilities are rated as Important by Red Hat Product Security. The advisory provides package updates for multiple Red Hat Enterprise Linux 8 variants and related builder products. No CVSS base score is included in the advisory, but the severity is described as high/important.
Potential Impact
The vulnerabilities include a stack buffer overrun which could potentially lead to memory corruption and a denial of service condition in ASP.NET Core due to a deadlock. These issues could impact the stability and security of applications running on .NET 7.0 on affected Red Hat Enterprise Linux systems. No known exploits in the wild have been reported at the time of the advisory.
Mitigation Recommendations
Red Hat has released updated packages for .NET SDK 7.0.119 and .NET Runtime 7.0.19 that address these vulnerabilities. Users of affected Red Hat Enterprise Linux 8 systems should apply these updates as detailed in the Red Hat advisory RHSA-2024:3340 and the referenced article https://access.redhat.com/articles/11258. The advisory indicates the update is important and should be applied promptly. No additional mitigation steps are specified or required beyond applying the official update.
Red Hat Security Advisory: .NET 7.0 security update
Description
.NET 7.0 framework for Red Hat Enterprise Linux has security vulnerabilities including a stack buffer overrun in Double Parse and a denial of service in ASP.NET Core due to a deadlock. Updated versions .NET SDK 7.0.119 and .NET Runtime 7.0.19 address these issues. The advisory rates the impact as Important. No CVSS score is provided in the source data.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This security advisory from Red Hat addresses multiple vulnerabilities in the .NET 7.0 framework, specifically a stack buffer overrun in the Double Parse function (CVE-2024-30045) and a denial of service vulnerability in ASP.NET Core caused by a deadlock in Http2OutputProducer.Stop() (CVE-2024-30046). The update includes .NET SDK 7.0.119 and .NET Runtime 7.0.19 which fix these issues. The advisory also references additional CVEs (CVE-2024-21386, CVE-2024-21404) related to the update. The vulnerabilities are rated as Important by Red Hat Product Security. The advisory provides package updates for multiple Red Hat Enterprise Linux 8 variants and related builder products. No CVSS base score is included in the advisory, but the severity is described as high/important.
Potential Impact
The vulnerabilities include a stack buffer overrun which could potentially lead to memory corruption and a denial of service condition in ASP.NET Core due to a deadlock. These issues could impact the stability and security of applications running on .NET 7.0 on affected Red Hat Enterprise Linux systems. No known exploits in the wild have been reported at the time of the advisory.
Mitigation Recommendations
Red Hat has released updated packages for .NET SDK 7.0.119 and .NET Runtime 7.0.19 that address these vulnerabilities. Users of affected Red Hat Enterprise Linux 8 systems should apply these updates as detailed in the Red Hat advisory RHSA-2024:3340 and the referenced article https://access.redhat.com/articles/11258. The advisory indicates the update is important and should be applied promptly. No additional mitigation steps are specified or required beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:3340
- Cve Count
- 4
- Additional Cves
- ["CVE-2024-21404","CVE-2024-30045","CVE-2024-30046"]
Threat ID: 6a7e0341bf8831d5398f4e77
Added to database: 08/13/2026, 17:47:45 UTC
Last enriched: 08/13/2026, 17:49:13 UTC
Last updated: 09/10/2026, 19:38:44 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.