CVE-2024-8061

Katalog CVE

CVSS 7.5 · High EPSS 0,48%

Kerentanan Synchronous Access of Remote Resource without Timeout pada aimstack aim. Skor CVSS 3.0 7.5 (High) menurut huntr.dev.

Deskripsi (NVD)

In version 3.23.0 of aimhubio/aim, certain methods that request data from external servers do not have set timeouts, causing the server to wait indefinitely for a response. This can lead to a denial of service, as the tracking server does not respond to other requests while waiting. The issue arises in the client used by the `aim` tracking server to communicate with external resources, specifically in the `_run_read_instructions` method and similar calls without timeouts.

Rincian

Terbit di NVD

20 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.0

7.5 (High), sumber huntr.dev
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1088: Synchronous Access of Remote Resource without Timeout

EPSS (30 hari)

0,48% peluang dieksploitasi; lebih tinggi dari 39,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://huntr.com/bounties/c85d005c-b354-4c51-a88f-adda2f09622b exploit · advisory pihak ketiga