CVE-2024-10110: falha de alta gravidade em aimhubio/aim
Denial of Service in aimhubio/aim
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.6%
In version 3.23.0 of aimhubio/aim, the ScheduledStatusReporter object can be instantiated to run on the main thread of the tracking server, leading to the main thread being blocked indefinitely. This results in a denial of service as the tracking server becomes unable to respond to other requests.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
aimhubio · aimhubio/aimCVEs relacionadas — aimhubio/aim
No mesmo produto, das mais perigosas para as menos.
CVE-2024-6396CRITICALArbitrary File Overwrite and Data Exfiltration in aimhubio/aimEPSS 53.1%CVE-2024-2195CRITICALRemote Code Execution in aimhubio/aimEPSS 1.8%CVE-2024-6851HIGHArbitrary File Deletion in aimhubio/aimEPSS 1.1%CVE-2024-8769CRITICALArbitrary File Deletion via Relative Path Traversal in aimhubio/aimEPSS 0.9%CVE-2024-6483MEDIUMArbitrary File/Directory Deletion in aimhubio/aimEPSS 0.9%CVE-2024-6829CRITICALArbitrary File Overwrite through tarfile-extraction in aimhubio/aimEPSS 0.9%