CVE-2024-8020: Denial of Service in lightning-ai/pytorch-lightning
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8020?
CVE-2024-8020 has been classified as a denial of service vulnerability.
How do I fix CVE-2024-8020?
To fix CVE-2024-8020, you should upgrade your installation of pytorch-lightning to a version higher than 2.3.2.
Which versions of PyTorch Lightning are affected by CVE-2024-8020?
CVE-2024-8020 affects PyTorch Lightning version 2.3.2 and earlier.
What is the impact of CVE-2024-8020 on applications using PyTorch Lightning?
The impact of CVE-2024-8020 includes a denial of service condition that can disrupt application functionality.
What causes the CVE-2024-8020 vulnerability?
CVE-2024-8020 is caused by improper handling of unexpected state values in POST requests to the /api/v1/state endpoint.