CVE-2024-8984CWE-770

Denial of Service (DoS) in berriai/litellm

High · published March 20, 2025

CVSS v3.0
7.5
EPSS
1%
Percentile
58.0
In the wild
Unconfirmed
What it is

A Denial of Service (DoS) vulnerability exists in berriai/litellm version v1.44.5. This vulnerability can be exploited by appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request. The server continuously processes each character, leading to excessive resource consumption and rendering the service unavailable. The issue is unauthenticated and does not require any user interaction, impacting all users of the service.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00857 · 58.0th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-03-20T10:09Z
EPSS history
Timeline
  • 20 MAR 10:09Z
    Denial of Service (DoS) in berriai/litellm
    cvelistv5