VDB

GHSA-7fcr-8qw6-92fr

GHSA-7fcr-8qw6-92fr PUBLISHED CVSS 6.300000190734863 MEDIUM

Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability

Record from GitHub Advisory Database · Published May 14, 2024

Microsoft.NETCore.App.Runtime.linux-musl-x64 is fixed in 8.0.5 and 7.0.19 (NuGet)

Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
Microsoft.NETCore.App.Runtime.linux-musl-x64NuGet8.0.5, 7.0.19
Microsoft.NETCore.App.Runtime.linux-x64NuGet8.0.5, 7.0.19
Microsoft.NETCore.App.Runtime.linux-musl-armNuGet8.0.5, 7.0.19
Microsoft.NETCore.App.Runtime.linux-arm64NuGet8.0.5, 7.0.19
Microsoft.NETCore.App.Runtime.linux-musl-arm64NuGet8.0.5, 7.0.19
Microsoft.NETCore.App.Runtime.osx-x64NuGet8.0.5, 7.0.19
Microsoft.NETCore.App.Runtime.win-x64NuGet8.0.5, 7.0.19
Microsoft.NETCore.App.Runtime.win-x86NuGet8.0.5, 7.0.19
Microsoft.NETCore.App.Runtime.linux-armNuGet8.0.5, 7.0.19
Microsoft.NETCore.App.Runtime.win-armNuGet8.0.5, 7.0.19
Microsoft.NETCore.App.Runtime.osx-arm64NuGet8.0.5, 7.0.19
Microsoft.NETCore.App.Runtime.win-arm64NuGet8.0.5, 7.0.19

Risk scores

CVSS 3.1
6.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

VendorProductVersions
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-x648.0.0, 7.0.0
NuGetMicrosoft.NETCore.App.Runtime.linux-x648.0.0, 7.0.0
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-arm7.0.0, 8.0.0
NuGetMicrosoft.NETCore.App.Runtime.osx-x647.0.0, 8.0.0
NuGetMicrosoft.NETCore.App.Runtime.win-x647.0.0, 8.0.0
NuGetMicrosoft.NETCore.App.Runtime.win-x867.0.0, 8.0.0
NuGetMicrosoft.NETCore.App.Runtime.linux-arm8.0.0, 7.0.0
NuGetMicrosoft.NETCore.App.Runtime.linux-arm648.0.0, 7.0.0
NuGetMicrosoft.NETCore.App.Runtime.win-arm8.0.0, 7.0.0
NuGetMicrosoft.NETCore.App.Runtime.osx-arm648.0.0, 7.0.0
NuGetMicrosoft.NETCore.App.Runtime.linux-musl-arm648.0.0, 7.0.0
NuGetMicrosoft.NETCore.App.Runtime.win-arm648.0.0, 7.0.0

Timeline

  • May 14, 2024 CVE Published
  • Apr 30, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-7fcr-8qw6-92fr
vulnetix vdb fixes GHSA-7fcr-8qw6-92fr

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-7fcr-8qw6-92fr/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›