GitHub Advisoryadvisory · PyPI

GHSA-36h2-g4c8-9xcm Aim denial of service vulnerability

HIGH Published 2024-07-08 Modified 2024-08-30 Official page ↗
Aliases
CVE-2024-6227
Ecosystem
PyPI
Packages
aim
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-835
Reviewed
2024-08-07

Affected packages

• PyPI aim: <= 3.19.3 (no fix yet)

Description

A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections.

Related

Alias · CVE (1)

  • CVE-2024-6227 A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to… vulnerability

Weakness · CWE (1)

  • CWE-835 Loop with Unreachable Exit Condition weakness

References