CVE-2024-10188: Denial of Service in BerriAI/litellm
A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service (DoS) by exploiting the use of ast.literaleval to parse user input. This function is not safe and is prone to DoS attacks, which can crash the litellm Python server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10188?
CVE-2024-10188 has been classified as a medium severity vulnerability due to its potential to cause Denial of Service.
How do I fix CVE-2024-10188?
To fix CVE-2024-10188, it is recommended to update to a secure version of BerriAI litellm that does not use ast.literal_eval for user input.
What type of attack does CVE-2024-10188 facilitate?
CVE-2024-10188 facilitates Denial of Service (DoS) attacks by allowing unauthenticated users to crash the litellm Python server.
Which version of BerriAI litellm is affected by CVE-2024-10188?
CVE-2024-10188 affects BerriAI litellm version 26c03c9.
Who is impacted by CVE-2024-10188?
Any user of BerriAI litellm version 26c03c9 is impacted by CVE-2024-10188, particularly those allowing user input parsing.