CVE-2024-21409

Publication date 9 April 2024

Last updated 1 August 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

7.3 · High

Score breakdown

Description

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

Read the notes from the security team

Status

Package Ubuntu Release Status
dotnet6 23.10 mantic
Not affected
22.04 LTS jammy
Not affected
20.04 LTS focal Not in release
dotnet7 23.10 mantic
Not affected
22.04 LTS jammy
Not affected
20.04 LTS focal Not in release
dotnet8 23.10 mantic
Not affected
22.04 LTS jammy
Not affected
20.04 LTS focal Not in release

Notes

iconstantin

Windows specific issue.

Severity score breakdown

CVSS version: CVSS v3.0

Base score 7.3 · High

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

References

Other references

Access our resources on patching vulnerabilities