VULNERABILITY INTELLIGENCE

CVE-2024-6227

CVSS score7.5 HIGH
EPSS probability0.58%
CISA KEVNot currently listed
Published2024-07-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections.

Weakness classification

  • security@huntr.dev: CWE-835
  • nvd@nist.gov: CWE-835

Primary references