Upstream information
CVE-2024-38229 at MITRE
Description
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
CVSS v3 Scores
| CVSS detail | CNA (Microsoft) | 
|---|
| Base Score | 8.1 | 
| Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | 
| Attack Vector | Network | 
| Attack Complexity | High | 
| Privileges Required | None | 
| User Interaction | None | 
| Scope | Unchanged | 
| Confidentiality Impact | High | 
| Integrity Impact | High | 
| Availability Impact | High | 
| CVSSv3 Version | 3.1 | 
No SUSE Bugzilla entries cross referenced.
SUSE Security Advisories:
List of released packages
| Product(s) | Fixed package version(s) | References | 
|---|
| SUSE Liberty Linux 8 | aspnetcore-runtime-8.0 >= 8.0.10-1.el8_10aspnetcore-runtime-dbg-8.0 >= 8.0.10-1.el8_10aspnetcore-targeting-pack-8.0 >= 8.0.10-1.el8_10dotnet >= 8.0.110-1.el8_10dotnet-apphost-pack-8.0 >= 8.0.10-1.el8_10dotnet-host >= 8.0.10-1.el8_10dotnet-hostfxr-8.0 >= 8.0.10-1.el8_10dotnet-runtime-8.0 >= 8.0.10-1.el8_10dotnet-runtime-dbg-8.0 >= 8.0.10-1.el8_10dotnet-sdk-8.0 >= 8.0.110-1.el8_10dotnet-sdk-8.0-source-built-artifacts >= 8.0.110-1.el8_10dotnet-sdk-dbg-8.0 >= 8.0.110-1.el8_10dotnet-targeting-pack-8.0 >= 8.0.10-1.el8_10dotnet-templates-8.0 >= 8.0.110-1.el8_10netstandard-targeting-pack-2.1 >= 8.0.110-1.el8_10
 | Patchnames: RHSA-2024:7868
 | 
| SUSE Liberty Linux 9 | aspnetcore-runtime-8.0 >= 8.0.10-1.el9_4aspnetcore-runtime-dbg-8.0 >= 8.0.10-1.el9_4aspnetcore-targeting-pack-8.0 >= 8.0.10-1.el9_4dotnet-apphost-pack-8.0 >= 8.0.10-1.el9_4dotnet-host >= 8.0.10-1.el9_4dotnet-hostfxr-8.0 >= 8.0.10-1.el9_4dotnet-runtime-8.0 >= 8.0.10-1.el9_4dotnet-runtime-dbg-8.0 >= 8.0.10-1.el9_4dotnet-sdk-8.0 >= 8.0.110-1.el9_4dotnet-sdk-8.0-source-built-artifacts >= 8.0.110-1.el9_4dotnet-sdk-dbg-8.0 >= 8.0.110-1.el9_4dotnet-targeting-pack-8.0 >= 8.0.10-1.el9_4dotnet-templates-8.0 >= 8.0.110-1.el9_4netstandard-targeting-pack-2.1 >= 8.0.110-1.el9_4
 | Patchnames: RHSA-2024:7869
 | 
SUSE Timeline for this CVE
CVE page created: Tue Oct  8 20:00:23 2024
CVE page last modified: Mon Oct  6 19:56:05 2025