Red Hat Security Advisory: .NET 7.0 security update
.NET 7.0 for Red Hat Enterprise Linux has received an important security update addressing multiple vulnerabilities. The update fixes a stack buffer overrun in the Double Parse function (CVE-2024-30045) and a denial of service vulnerability in ASP.NET Core caused by a deadlock in Http2OutputProducer.Stop() (CVE-2024-30046). These issues could potentially lead to application crashes or service disruption. Updated versions .NET SDK 7.0.119 and .NET Runtime 7.0.19 are available to remediate these vulnerabilities.
AI Analysis
Technical Summary
Red Hat has released security updates for .NET 7.0 on Red Hat Enterprise Linux to address two significant vulnerabilities: a stack buffer overrun in the Double Parse function (CVE-2024-30045) and a denial of service vulnerability in ASP.NET Core due to a deadlock in Http2OutputProducer.Stop() (CVE-2024-30046). The stack buffer overrun represents a memory safety issue (CWE-119), while the denial of service relates to improper handling of concurrency leading to deadlock (CWE-400, CWE-833). The updates are provided in .NET SDK 7.0.119 and .NET Runtime 7.0.19 packages. Red Hat rates the security impact as Important and recommends applying these updates to affected systems running Red Hat Enterprise Linux 9 and its variants.
Potential Impact
The vulnerabilities could allow attackers to cause application crashes or denial of service conditions. The stack buffer overrun may lead to memory corruption, potentially impacting application stability or security. The deadlock in ASP.NET Core could cause service unavailability by halting HTTP/2 output processing. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated packages .NET SDK 7.0.119 and .NET Runtime 7.0.19 that fix these vulnerabilities. Users should apply these official updates promptly to remediate the issues. Detailed update instructions are available at Red Hat's advisory page (https://access.redhat.com/articles/11258). No additional mitigations are indicated or required beyond applying the provided patches.
Red Hat Security Advisory: .NET 7.0 security update
Description
.NET 7.0 for Red Hat Enterprise Linux has received an important security update addressing multiple vulnerabilities. The update fixes a stack buffer overrun in the Double Parse function (CVE-2024-30045) and a denial of service vulnerability in ASP.NET Core caused by a deadlock in Http2OutputProducer.Stop() (CVE-2024-30046). These issues could potentially lead to application crashes or service disruption. Updated versions .NET SDK 7.0.119 and .NET Runtime 7.0.19 are available to remediate these vulnerabilities.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat has released security updates for .NET 7.0 on Red Hat Enterprise Linux to address two significant vulnerabilities: a stack buffer overrun in the Double Parse function (CVE-2024-30045) and a denial of service vulnerability in ASP.NET Core due to a deadlock in Http2OutputProducer.Stop() (CVE-2024-30046). The stack buffer overrun represents a memory safety issue (CWE-119), while the denial of service relates to improper handling of concurrency leading to deadlock (CWE-400, CWE-833). The updates are provided in .NET SDK 7.0.119 and .NET Runtime 7.0.19 packages. Red Hat rates the security impact as Important and recommends applying these updates to affected systems running Red Hat Enterprise Linux 9 and its variants.
Potential Impact
The vulnerabilities could allow attackers to cause application crashes or denial of service conditions. The stack buffer overrun may lead to memory corruption, potentially impacting application stability or security. The deadlock in ASP.NET Core could cause service unavailability by halting HTTP/2 output processing. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated packages .NET SDK 7.0.119 and .NET Runtime 7.0.19 that fix these vulnerabilities. Users should apply these official updates promptly to remediate the issues. Detailed update instructions are available at Red Hat's advisory page (https://access.redhat.com/articles/11258). No additional mitigations are indicated or required beyond applying the provided patches.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:2843
- Cve Count
- 4
- Additional Cves
- ["CVE-2024-21404","CVE-2024-30045","CVE-2024-30046"]
Threat ID: 6a7e0342bf8831d5398f4e85
Added to database: 08/13/2026, 17:47:46 UTC
Last enriched: 08/13/2026, 17:49:34 UTC
Last updated: 09/10/2026, 19:38:44 UTC
Views: 16
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.