CVE-2024-10344

Unauthenticated Denial of Service via Refuse Function

State: Published
Severity: 8.7 High
Published: Nov 11, 2024
Updated: Jan 29, 2025
Reserved: Oct 24, 2024

Description

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the refuse function was identified. Reported by Karol Więsek.

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N	Perforce

Weaknesses

CWE-400 Uncontrolled Resource Consumption

Affected Products

Product	Versions
Helix CoreHelix	0.0.0 to before 2024.2Affected 0.0.0 to before 2024.1Affected 0.0.0 to before 2023.2Affected 0.0.0 to before 2023.1Affected 0.0.0 to before 2022.2Affected

References

https://portal.perforce.com/s/detail/a91PA000001SZOrYAO

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.