CVE-2024-8061

Summary

CVE-2024-8061 is a vulnerability affecting version 3.23.0 of the aimhubio/aim package. This issue involves certain methods in the `aim` tracking server that do not have set timeouts when requesting data from external servers. As a result, the server will wait indefinitely for a response, leading to a denial of service. This occurs in the client used by the `aim` tracking server to communicate with external resources, specifically in the `_run_read_instructions` method and similar calls without timeouts. This vulnerability can prevent the server from responding to other requests, potentially causing significant disruptions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.