Skip to main content

Uncontrolled Resource Consumption

CVE-2024-10110

High
7.5/10

Summary

In aimhubio/aim, the 'ScheduledStatusReporter' object can be instantiated to run on the main thread of the tracking server, leading to the main thread being blocked indefinitely. This results in a Denial of Service as the tracking server becomes unable to respond to other requests. This issue affects versions 3.15.0.dev1 and after.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-400 - Uncontrolled resource consumption

An uncontrolled resource allocation attack (also known as resource exhaustion attack) triggers unauthorized overconsumption of the limited resources in an application, such as memory, file system storage, database connection pool entries, and CPU. This may lead to denial of service for valid users and degradation of the application's functionality as well as that of the host operating system.

References

Advisory Timeline

  • Published