CVE-2024-36416: SuiteCRM v4 API Excessive log data DOS
SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a deprecated v4 API example with no log rotation allows denial of service by logging excessive data. Versions 7.14.4 and 8.6.1 contain a fix for this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36416?
CVE-2024-36416 has a moderate severity level due to the potential for denial of service caused by excessive logging.
How do I fix CVE-2024-36416?
To fix CVE-2024-36416, upgrade to SuiteCRM version 7.14.4 or 8.6.1 or later.
Which versions of SuiteCRM are affected by CVE-2024-36416?
Versions prior to 7.14.4 and between 8.0.0 and 8.6.1 of SuiteCRM are affected by CVE-2024-36416.
What is the impact of CVE-2024-36416 on SuiteCRM applications?
The impact of CVE-2024-36416 is a denial of service due to the inability to manage excessive log data.
Is there a workaround for CVE-2024-36416 if I cannot upgrade SuiteCRM?
There is no official workaround for CVE-2024-36416 other than applying the recommended upgrade.