Visual Studio Collector Service Denial of Service Vulnerability

🔗 CVE IDs covered (1)

🎯 Affected products7

• Microsoft Visual Studio 2015 Update 3
• Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
• Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
• Microsoft Visual Studio 2022 version 17.10
• Microsoft Visual Studio 2022 version 17.11
• Microsoft Visual Studio 2022 version 17.6
• Microsoft Visual Studio 2022 version 17.8

✅ Remediation

KBRelease Notes (Security Update) — fixed build 17.11.5 KBRelease Notes (Security Update) — fixed build 15.9.67 KBRelease Notes (Security Update) — fixed build 16.11.41 KBRelease Notes (Security Update) — fixed build 17.6.20 KBRelease Notes (Security Update) — fixed build 17.8.15 KBRelease Notes (Security Update) — fixed build 17.10.8 KB5045536 (Security Update) — fixed build 14.0.27561.00

🔗 References (12)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43603
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.11
• referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
• patchhttp://aka.ms/vs/15/release/latest
• referencehttps://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11
• referencehttps://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.6
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.8
• patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.10
• patchhttps://aka.ms/vs/14/release/5045536
• referencehttps://support.microsoft.com/help/5045536