CVE-2024-54170
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 27, 2025
CWE ID 1333
Summary
CVE-2024-54170 is a vulnerability affecting IBM EntireX 11.1. This issue permits a local user to instigate a denial of service condition by employing a complex regular expression. The inefficient processing of the regulation expression results in excessive CPU usage, leading to a potential service outage. IBM EntireX users are advised to apply the necessary patches to mitigate this risk. This flaw can be exploited to disrupt the normal functioning of the system, causing inconvenience or potential downtime.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.