CVE-2024-45163CWE-400denial-of-service

CVE-2024-45163

Critical · published August 22, 2024

CVSS v3.1
9.1
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

🚨 The Mirai botnet is back, and it's playing a dangerous game with open TCP connections! 🔥 Think of it like a crowded restaurant where too many diners have sat down without ordering — they’re just taking up space and resources while the kitchen struggles to keep up. Each open session consumes precious resources, slowing everything down and making it easier for attackers to send arbitrary data. This vulnerability could leave your servers gasping for breath as they try to handle all those unauthorized connections. An attacker could exploit this to flood the system with requests, potentially causing outages or service degradation. This isn't just a nuisance; it could lead to major disruptions!

Put simply

Think of it like a crowded restaurant where too many diners have sat down without ordering — they’re just taking up space and resources while the kitchen struggles to keep up. Each open session consumes precious resources, slowing everything down and making it easier for attackers to send arbitrary data. CVE-2024-45163 arises from how the Mirai botnet mishandles simultaneous TCP connections to its command and control server, leaving unauthenticated sessions open and consuming system resources.

What to do

This vulnerability could leave your servers gasping for breath as they try to handle all those unauthorized connections. An attacker could exploit this to flood the system with requests, potentially causing outages or service degradation. This isn't just a nuisance; it could lead to major disruptions! To protect yourself, ensure you patch any affected systems as soon as updates are available. Additionally, review your network configurations to limit unauthorized access and monitor for unusual traffic patterns. Implementing rate limiting on TCP connections can also help mitigate this issue. You've got this! With the right steps, you can lock down your systems and keep those pesky bots at bay. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00768 · 55.1th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2024-08-22T08:15Z
References (5)
EPSS history
Timeline
  • 22 AUG 00:00Z
    The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server
    cvelistv5