CVE-2024-10110
CVE-2024-10110 · Denial of Service in aimhubio/aim
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In version 3.23.0 of aimhubio/aim, the ScheduledStatusReporter object can be instantiated to run on the main thread of the tracking server, leading to the main thread being blocked indefinitely. This results in a denial of service as the tracking server becomes unable to respond to other requests.
CVSS 7.5 · High · EPSS 0.6%
- Published
- Updated
Stack: python
Affected products and versions
aimhubio/aim
- Versions
- ≥ unspecified, ≤ latest: Affected (custom)
No fix published
aim PyPI
- Versions
- 3.15.0
- 3.15.1
- 3.15.2
- 3.16.0
- 3.16.1
- 3.16.2
- 3.17.0
- 3.17.1
- 3.17.2
- 3.17.3
- 3.17.4
- 3.17.5
- 3.17.5rc1
- 3.17.5rc2
- 3.17.5rc3
- 3.17.5rc4
- 3.18.0
- 3.18.0.dev2
- 3.18.0.dev3
- 3.18.0.dev4
- 3.18.0.dev5
- 3.18.1
- 3.19.0
- 3.19.1
- 3.19.2
- 3.19.3
- 3.20.1
- 3.21.0
- 3.22.0
- 3.23.0
- Affected ranges
- ECOSYSTEM: ≥ 3.15.0, ≤ 3.23.0
No fix published