Microsoft Identity Denial of service vulnerability
CVE-2024-21319

6.8MEDIUM

Key Information:

Vendor

Microsoft
Status
.net 6.0
Microsoft Visual Studio 2022 Version 17.2
Microsoft Visual Studio 2022 Version 17.6
Microsoft Visual Studio 2022 Version 17.4
Vendor
CVE Published:
9 January 2024

What is CVE-2024-21319?

A denial of service vulnerability exists within Microsoft Identity, which could allow an attacker to impair the functions of the affected services. This vulnerability may lead to disruption in user authentication and application access, resulting in negative impacts on operations relying on these critical identity services. Organizations utilizing Microsoft Identity platforms must take necessary precautions to mitigate any potential exploitation of this vulnerability, ensuring the security and continuity of their operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

.NET 6.0 Unknown 6.0.0 < 6.0.26

.NET 7.0 Unknown 7.0.0 < 7.0.15

.NET 8.0 Unknown 8.0 < 8.0.1

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.