What is GHSA-36h2-g4c8-9xcm?

GHSA-36h2-g4c8-9xcm is a security advisory published by GitHub Security Advisories with High severity. Aim denial of service vulnerability

Which CVE IDs does GHSA-36h2-g4c8-9xcm cover?

GHSA-36h2-g4c8-9xcm covers the following CVE IDs: CVE-2024-6227. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-36h2-g4c8-9xcm?

GHSA-36h2-g4c8-9xcm has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-36h2-g4c8-9xcm?

GHSA-36h2-g4c8-9xcm affects 1 product, including: pip/aim:\u003c= 3.19.3.

GHSA-36h2-g4c8-9xcmHighCVSS 7.5

Aim denial of service vulnerability

Vendor

GitHub Security Advisories

Published

July 8, 2024

Last Modified

August 30, 2024

🔗 CVE IDs covered (1)

CVE-2024-6227 →

📋 Description

A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections.

🎯 Affected products1

pip/aim:<= 3.19.3

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2024-6227
https://huntr.com/bounties/abcea7c6-bb3b-45e9-aa15-9eb6b224451a
https://github.com/aimhubio/aim/blob/2e7b8aff8dcba9ddd5043dfec88cf2319ba8a87c/aim/sdk/repo.py#L195
https://github.com/advisories/GHSA-36h2-g4c8-9xcm