CVE-2024-38095
HighAdvisory
Published 9 Jul 2024In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.027
- 85th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 18
- of 17,781 indexed, latest versions
- Container images
- 40
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Microsoft Security Advisory CVE-2024-38095 | .NET Denial of Service Vulnerability
Carried by container images the latest versions of 18 of 17,781 indexed charts deploy, on 40 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| System.Formats.Asn1nuget | 5.0.0, 5.0.0.0, 6.0.0.0 | 6.0.1 | 21 |
| Microsoft.NETCore.App.Runtime.linux-x64nuget | 6.0.4, 6.0.7, 6.0.8, 6.0.11+3 more | 6.0.32, 8.0.7 | 20 |
| Microsoft.NETCore.App.Runtime.linux-musl-x64nuget | 6.0.31 | 6.0.32 | 1 |
- OSV records
- GHSA-447r-wph3-92pm
- Also known as
- BIT-dotnet-2024-38095, BIT-dotnet-sdk-2024-38095
Charts affected
18 by stars
Container images carrying it
40 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| mcr.microsoft.com/ | 902628a8be89 | System.Formats.Asn1 | 6.0.1 | 2 |
| aidasi/ | 838b5e2080bc | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| aidasi/ | fee6857b9bc9 | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| aidasi/ | 5ce8dbff7fdc | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| aidasi/ | d433285c7d5a | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| cyclonedx/ | 9e0c4db6e688 | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| emberstack/ | 1d81a5df909b | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| ironmansoftware/ | 1943c73cce31 | System.Formats.Asn1 | 6.0.1 | 1 |
| karatejb/ | f11ac24b23b9 | System.Formats.Asn1 | 6.0.1 | 1 |
| linuxserver/ | 2427dde159a2 | System.Formats.Asn1 | 6.0.1 | 1 |
| lumenvox/ | fcb9fb54a9fd | System.Formats.Asn1 | 6.0.1 | 1 |
| lumenvox/ | 147854a3c916 | System.Formats.Asn1 | 6.0.1 | 1 |
| lumenvox/ | 79428add7f38 | System.Formats.Asn1 | 6.0.1 | 1 |
| lumenvox/ | 53decadc102d | System.Formats.Asn1 | 6.0.1 | 1 |
| lumenvox/ | ea8110886d38 | System.Formats.Asn1 | 6.0.1 | 1 |
| lumenvox/ | e2e5abe27abc | System.Formats.Asn1 | 6.0.1 | 1 |
| lumenvox/ | b9a23345eabd | System.Formats.Asn1 | 6.0.1 | 1 |
| lumenvox/ | 7a9ffdc2178a | System.Formats.Asn1 | 6.0.1 | 1 |
| lumenvox/ | dbbaf5462ad6 | System.Formats.Asn1 | 6.0.1 | 1 |
| lumenvox/ | 8b74f9d3ba09 | System.Formats.Asn1 | 6.0.1 | 1 |
| lumenvox/ | 14170ad34903 | System.Formats.Asn1 | 6.0.1 | 1 |
| miqm/ | c5c211717d9b | Microsoft.NETCore.App.Runtime.linux-x64 | 8.0.7 | 1 |
| nethermind/ | 15517708c3b6 | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| rnwood/ | 912304153668 | Microsoft.NETCore.App.Runtime.linux-x64 | 8.0.7 | 1 |
| simpleidserver/ | 53c159ea49ca | System.Formats.Asn1 | 6.0.1 | 1 |
| simpleidserver/ | 9007e742dd48 | System.Formats.Asn1 | 6.0.1 | 1 |
| thecloudspark/ | dbfcfe02bf36 | Microsoft.NETCore.App.Runtime.linux-musl-x64 | 6.0.32 | 1 |
| zbalogh/ | 09a51b809674 | System.Formats.Asn1 | 6.0.1 | 1 |
| ghcr.io/ | c7c0a52303cb | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| ghcr.io/ | ad943e9309e4 | System.Formats.Asn1 | 6.0.1 | 1 |
| ghcr.io/ | 22ce496c67d7 | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| ghcr.io/ | 7e53010dda55 | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| ghcr.io/ | 26465a2bf671 | Microsoft.NETCore.App.Runtime.linux-x64 System.Formats.Asn1 | 6.0.32 6.0.1 | 1 |
| ghcr.io/ | 50cab15c80d9 | Microsoft.NETCore.App.Runtime.linux-x64 System.Formats.Asn1 | 6.0.32 6.0.1 | 1 |
| ghcr.io/ | 206a9bee17a8 | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| ghcr.io/ | dd5ce454072e | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| ghcr.io/ | 7ecb00f53d99 | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| ghcr.io/ | e53bf47b62d0 | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| ghcr.io/ | 5e836b17337f | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |
| ghcr.io/ | 2ca91145099c | Microsoft.NETCore.App.Runtime.linux-x64 | 6.0.32 | 1 |