CVE-2024-8984: Denial of Service (DoS) in berriai/litellm
A Denial of Service (DoS) vulnerability exists in berriai/litellm version v1.44.5. This vulnerability can be exploited by appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request. The server continuously processes each character, leading to excessive resource consumption and rendering the service unavailable. The issue is unauthenticated and does not require any user interaction, impacting all users of the service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8984?
CVE-2024-8984 is classified as a Denial of Service (DoS) vulnerability.
How do I fix CVE-2024-8984?
To mitigate CVE-2024-8984, you should update the affected software version of berriai/litellm to the latest version that resolves the vulnerability.
What causes CVE-2024-8984?
CVE-2024-8984 is caused by the server endlessly processing characters appended to the multipart boundary in HTTP requests.
Which software is affected by CVE-2024-8984?
CVE-2024-8984 affects the BerriAI litellm version v1.44.5.
Can CVE-2024-8984 be exploited remotely?
Yes, CVE-2024-8984 can be exploited remotely by sending crafted HTTP requests to the server.