CVE-2024-6227: Infinite Loop in aimhubio/aim

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-07-08 · updated 2026-06-17
Weakness: CWE-835

Description

A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by configuring the remote tracking server to point at itself. This results in the server endlessly connecting to itself, rendering it unable to respond to other connections.

Affected products

aimhubio/aim: 3.19.3

References

https://huntr.com/bounties/abcea7c6-bb3b-45e9-aa15-9eb6b224451a
https://huntr.com/bounties/abcea7c6-bb3b-45e9-aa15-9eb6b224451a

Get alerted when CVE-2024-6227 or the next vulnerability affects your stack