Threats Tagged 'cve-2024-21404'

.NET 7.0 framework for Red Hat Enterprise Linux has security vulnerabilities including a stack buffer overrun in Double Parse and a denial of service in ASP.NET Core due to a deadlock. Updated versions .NET SDK 7.0.119 and .NET Runtime 7.0.19 address these issues. The advisory rates the impact as Important. No CVSS score is provided in the source data.

.NET 7.0 for Red Hat Enterprise Linux has received an important security update addressing multiple vulnerabilities. The update fixes a stack buffer overrun in the Double Parse function (CVE-2024-30045) and a denial of service vulnerability in ASP.NET Core caused by a deadlock in Http2OutputProducer.Stop() (CVE-2024-30046). These issues could potentially lead to application crashes or service disruption. Updated versions .NET SDK 7.0.119 and .NET Runtime 7.0.19 are available to remediate these vulnerabilities.

.NET 6.0 contains a denial of service vulnerability in the X509Certificate2 component (CVE-2024-21404). Red Hat has released updated versions of the .NET SDK (6.0.127) and .NET Runtime (6.0.27) to address this issue. The vulnerability is rated as having an important security impact by Red Hat. This affects Red Hat Enterprise Linux 8.8 and related products. No CVSS score is provided in the advisory.

.NET 8.0 for Red Hat Enterprise Linux contains two denial of service vulnerabilities affecting the SignalR server and the X509Certificate2 component. Updated versions .NET SDK 8.0.102 and .NET Runtime 8.0.2 address these issues. The vulnerabilities are rated with an important security impact by Red Hat. No CVSS scores are provided in the advisory. The update is available for multiple Red Hat Enterprise Linux 9 variants and architectures.

.NET 8.0 for Red Hat Enterprise Linux has security vulnerabilities that allow denial of service attacks in the SignalR server component and the X509Certificate2 class. Red Hat has released updated versions .NET SDK 8.0.102 and .NET Runtime 8.0.2 to address these issues. The vulnerabilities are identified as CVE-2024-21386 and CVE-2024-21404. These issues affect multiple Red Hat Enterprise Linux 8 variants and related products. The update is rated as Important by Red Hat Product Security.

.NET 6.0 on Red Hat Enterprise Linux has received an important security update addressing two denial of service vulnerabilities. The affected components include the SignalR server and the X509Certificate2 class. Updated versions .NET SDK 6.0.127 and .NET Runtime 6.0.27 contain fixes for these issues. The vulnerabilities are tracked as CVE-2024-21386 and CVE-2024-21404. Red Hat has released patched packages for RHEL 7 to remediate these flaws.

Red Hat has released security updates for the dotnet6.0 packages addressing two denial of service vulnerabilities: CVE-2024-21386 affecting the SignalR server and CVE-2024-21404 affecting X509Certificate2. The fixes are included in .NET SDK 6.0.127 and .NET Runtime 6.0.27. These vulnerabilities could allow denial of service conditions but no active exploits are known. The update is rated as Important by Red Hat and applies to Red Hat Enterprise Linux 8 and related variants.

Red Hat has released a security update for dotnet6.0 to address two denial of service vulnerabilities: CVE-2024-21386 affecting the SignalR server component and CVE-2024-21404 affecting X509Certificate2. The update includes .NET SDK 6.0.127 and .NET Runtime 6.0.27. These vulnerabilities could allow denial of service conditions if exploited. The update is rated as Important by Red Hat Product Security and affects multiple Red Hat Enterprise Linux 9 variants and architectures.