CVE-2024-12777

Katalog CVE

CVSS 5.9 · Medium EPSS 0,48%

Kerentanan Synchronous Access of Remote Resource without Timeout pada aimstack aim. Skor CVSS 3.0 5.9 (Medium) menurut huntr.dev.

Deskripsi (NVD)

A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service through the misuse of the sshfs-client. The tracking server, which is single-threaded, can be made unresponsive by requesting it to connect to an unresponsive socket via sshfs. The lack of an additional timeout setting in the sshfs-client causes the server to hang for a significant amount of time, preventing it from responding to other requests.

Rincian

Terbit di NVD

20 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.0

5.9 (Medium), sumber huntr.dev
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1088: Synchronous Access of Remote Resource without Timeout

EPSS (30 hari)

0,48% peluang dieksploitasi; lebih tinggi dari 39,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://huntr.com/bounties/cdf8db79-c290-4fe5-9383-4c518bfba4a8 exploit · advisory pihak ketiga