CVE-2024-8984
CVSS 3.0 Score 7.5 of 10 (high)
Details
Published Mar 20, 2025
CWE ID 400
Summary
CVE-2024-8984 is a newly disclosed Denial of Service (DoS) vulnerability affecting berriai/litellm version 1.44.5. An attacker can exploit this issue by appending specific characters, like dashes (-), to the end of a multipart boundary in an HTTP request. The server processes each character exhaustively, resulting in excessive resource consumption and rendering the service unavailable. This vulnerability is unauthenticated and does not require any user interaction, making all users of the affected service potential targets.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- BerriAI LiteLLM