CVE-2024-6227CWE-835

Infinite Loop in aimhubio/aim

High · published July 8, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00577 · 46.8th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2024-07-08T19:06Z
EPSS history
Timeline
  • 08 JUL 19:06Z
    Infinite Loop in aimhubio/aim
    cvelistv5