In version 3.23.0 of aimhubio/aim, certain methods that request data from external servers do not have set timeouts, causing the server to wait indefinitely for a response. This can lead to a denial of service, as the tracking server does not respond to other requests while waiting. The issue arises in the client used by the `aim` tracking server to communicate with external resources, specifically in the `_run_read_instructions` method and similar calls without timeouts.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://huntr.com/bounties/c85d005c-b354-4c51-a88f-adda2f09622b | Exploit Third Party Advisory |
Configurations
History
23 Jul 2025, 20:44
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Aimstack aim
Aimstack |
|
| References | () https://huntr.com/bounties/c85d005c-b354-4c51-a88f-adda2f09622b - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:aimstack:aim:3.23.0:*:*:*:*:python:*:* |
20 Mar 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-20 10:15
Updated : 2025-07-23 20:44
NVD link : CVE-2024-8061
Mitre link : CVE-2024-8061
JSON object : View
Products Affected
aimstack
- aim
CWE
CWE-400
Uncontrolled Resource Consumption