CVE-2024-6227

Published Jul 8, 2024

Last updated 6 months ago

Overview

Description: A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections.
Source: security@huntr.dev
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity: HIGH

Weaknesses

security@huntr.dev: CWE-835
nvd@nist.gov: CWE-835

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:aimstack:aim:3.19.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3385F0DE-BFDD-45D6-A0DF-3175FF3A4805"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References