CVE-2024-12777: falha de média gravidade em aimhubio/aim
Denial of Service in aimhubio/aim
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.5%
A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service through the misuse of the sshfs-client. The tracking server, which is single-threaded, can be made unresponsive by requesting it to connect to an unresponsive socket via sshfs. The lack of an additional timeout setting in the sshfs-client causes the server to hang for a significant amount of time, preventing it from responding to other requests.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
aimhubio · aimhubio/aimCVEs relacionadas — aimhubio/aim
No mesmo produto, das mais perigosas para as menos.
CVE-2024-6396CRITICALArbitrary File Overwrite and Data Exfiltration in aimhubio/aimEPSS 53.1%CVE-2024-2195CRITICALRemote Code Execution in aimhubio/aimEPSS 1.8%CVE-2024-6851HIGHArbitrary File Deletion in aimhubio/aimEPSS 1.1%CVE-2024-8769CRITICALArbitrary File Deletion via Relative Path Traversal in aimhubio/aimEPSS 0.9%CVE-2024-6483MEDIUMArbitrary File/Directory Deletion in aimhubio/aimEPSS 0.9%CVE-2024-6829CRITICALArbitrary File Overwrite through tarfile-extraction in aimhubio/aimEPSS 0.9%