CVE-2024-30045: microsoft microsoft visual studio 2022 version 17.4 Heap-based Buffer Overflow
CVSS: 6.3v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2024-30045GHSA-7fcr-8qw6-92frBIT-dotnet-2024-30045BIT-dotnet-sdk-2024-30045BIT-powershell-2024-30045
Published 14-05-2024Last modified 03-05-2025
Vulnerability summary
CVE-2024-30045 is a medium (CVSS 6.3) Heap-based Buffer Overflow vulnerability in microsoft microsoft visual studio 2022 version 17.4. EPSS estimates a 1.25% chance of exploitation in the next 30 days, higher than 68.9% of scored vulnerabilities.
CVSS score
6.3/10
010
Medium · v3.1 (CVE.org)EPSS score
1.25%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 5 · Related 1Timeline
- 14-05-2024PublishedVulnerability first disclosed.
- 03-05-2025Last modifiedVulnerability information updated.
Description
.NET and Visual Studio Remote Code Execution Vulnerability
CVSS metrics
4 scores · 4 sources · 1 versionMedium 6.3Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:CSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated6.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- OSV · NugetEcosystem advisory · calculated6.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- NVDNIST6.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
EPSS trend
Probability
1.25%
Chance of exploitation in the next 30 days
Percentile
69%
Versus all other CVEs
30-day change
0.00 pp
From 1.25% on 19-09-2026
19-09-202619-10-2026
EPSS score1.25%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
NuGet12 products
- Microsoft.NETCore.App.Runtime.linux-arm≥ 7.0.0, < 7.0.19 | ≥ 8.0.0, < 8.0.5
- Microsoft.NETCore.App.Runtime.linux-arm64≥ 7.0.0, < 7.0.19 | ≥ 8.0.0, < 8.0.5
- Microsoft.NETCore.App.Runtime.linux-musl-arm≥ 7.0.0, < 7.0.19 | ≥ 8.0.0, < 8.0.5
- Microsoft.NETCore.App.Runtime.linux-musl-arm64≥ 8.0.0, < 8.0.5 | ≥ 7.0.0, < 7.0.19
- Microsoft.NETCore.App.Runtime.linux-musl-x64≥ 7.0.0, < 7.0.19 | ≥ 8.0.0, < 8.0.5
Microsoft10 products
- microsoft visual studio 2022 version 17.4≥ 17.4.0, < 17.4.19
- microsoft visual studio 2022 version 17.6≥ 17.6.0, < 17.6.15
- microsoft visual studio 2022 version 17.8≥ 17.8.0, < 17.8.10
- microsoft visual studio 2022 version 17.9≥ 17.0, < 17.9.7
- .net≥ 7.0.0, < 7.0.19 | ≥ 8.0.0, < 8.0.5
Ubuntu2 products
- dotnet7< 7.0.119-0ubuntu1~22.04.1
- dotnet8< 8.0.105-8.0.5-0ubuntu1~22.04.1 | < 8.0.105-8.0.5-0ubuntu1~24.04.1
3 vendors · 24 products
References
12 links
- security.netapp.com/advisory/ntap-20241122-0001/Third Party Advisory
Show all 12 references
- github.com/dotnet/runtimePACKAGE