CVE-2024-6227

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-6227

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6227.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-6227

Aliases

Published

2024-07-08T19:06:31.579Z

Modified

2026-07-15T01:49:22.543158505Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Infinite Loop in aimhubio/aim

Details

A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections.

Database specific

{
    "cwe_ids": [
        "CWE-835"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6227.json",
    "cna_assigner": "@huntr_ai"
}

References

Affected packages

Git / github.com/aimhubio/aim

Affected ranges

Type

GIT

Repo

https://github.com/aimhubio/aim

Events

Introduced

17cdf0b8fc1120363cb646028e43140bdf0abba1

Last affected

17cdf0b8fc1120363cb646028e43140bdf0abba1

Database specific

{
    "cpe": "cpe:2.3:a:aimstack:aim:3.19.3:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.19.3"
        },
        {
            "last_affected": "3.19.3"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

3.*

3.19.3

v3.*

v3.19.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6227.json"