{"id":"CVE-2024-21312","published":"2024-01-09T17:57:10Z","modified":"2025-05-03T01:46:51Z","title":".NET Framework Denial of Service Vulnerability","vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","tier":"tail","description":{"text":".NET Framework Denial of Service Vulnerability","provenance":"source","from":"CVE.org"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.03578,"percentile":0.8936,"provenance":"source"},"cwes":[{"id":"CWE-20","name":"Improper Input Validation"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21312","tags":["vendor-advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240208-0008/","tags":["x_transferred"]}],"priority":{"score":23.1,"factors":[{"name":"EPSS percentile","points":17.87},{"name":"CVSS severity","points":5.25}]},"vendorSlug":"microsoft","affectedVersions":[{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8.1","versions":[">= 4.8.1, < 4.8.09214.01"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.8","versions":[">= 4.8.0, < 4.8.04690.02"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.8","versions":[">= 4.8.0, < 4.8.04690.02"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5 AND 4.7.2","versions":[">= 4.7.0, < 4.7.04081.03"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2","versions":[">= 4.7.0, < 4.7.04081.02"]},{"vendor":"Microsoft","product":"Microsoft .NET Framework 3.5","versions":[">= 3.5.0, < 3.0.50727.8976"]}],"euvd":{"id":"EUVD-2024-19025","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-microsoft-net-cwe-20"}}