fr Sign in

7.5 High

CVE-2024-20672 .NET Denial of Service Vulnerability

Description

.NET Denial of Service Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
.NET 6.0 6.0	6.0.0 → < 6.0.26	6.0.26
.NET 7.0 7.0	7.0.0 → < 7.0.15	7.0.15

References

.NET Denial of Service Vulnerability msrc.microsoft.com

Timeline

Published January 9, 2024
Last modified June 3, 2025

The 48 CVEs of .NET 6.0 →

CVE-2025-36855 A vulnerability ( CVE-2025-21176 https://www.cve.org/CVERecord ) exists in DiaSymReader.dll due to buffer over-read 8.8 High CVE-2025-36854 A vulnerability ( CVE-2024-38229 https://www.cve.org/CVERecord ) exists in EOL ASP.NET when closing an HTTP/3 stream… 8.1 High CVE-2025-36853 A vulnerability (CVE-2025-21172) exists in msdia140.dll due to integer overflow and heap-based overflow 7.5 High CVE-2024-43485 .NET and Visual Studio Denial of Service Vulnerability 7.5 High

Track this CVE