CVE-2024-7010

mudler/localai version 2.17.1 is vulnerable to a Timing Attack. This type of side-channel attack allows an attacker to compromise the cryptosystem by analyzing the time taken to execute cryptographic algorithms. Specifically, in the context of password handling, an attacker can determine valid login credentials based on the server's response time, potentially leading to unauthorized access.

CVSS v3 5.9 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/mudler/localai/commit/db1159b6511e8fa09e594f9db0fec6ab4e142468	Patch
https://huntr.com/bounties/e286ed00-6383-47de-b5bc-9b9fad67c362	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:mudler:localai:2.17.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2024-10-29 13:15

Updated : 2024-11-14 14:15

NVD link : CVE-2024-7010

Mitre link : CVE-2024-7010

CVE.ORG link : CVE-2024-7010

JSON object : View

Products Affected

mudler

localai

CWE

CWE-203

Observable Discrepancy

{"id": "CVE-2024-7010", "cveTags": [], "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "security@huntr.dev", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "published": "2024-10-29T13:15:08.683", "references": [{"url": "https://github.com/mudler/localai/commit/db1159b6511e8fa09e594f9db0fec6ab4e142468", "tags": ["Patch"], "source": "security@huntr.dev"}, {"url": "https://huntr.com/bounties/e286ed00-6383-47de-b5bc-9b9fad67c362", "tags": ["Exploit", "Third Party Advisory"], "source": "security@huntr.dev"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security@huntr.dev", "description": [{"lang": "en", "value": "CWE-203"}]}, {"type": "Secondary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-203"}]}], "descriptions": [{"lang": "en", "value": "mudler/localai version 2.17.1 is vulnerable to a Timing Attack. This type of side-channel attack allows an attacker to compromise the cryptosystem by analyzing the time taken to execute cryptographic algorithms. Specifically, in the context of password handling, an attacker can determine valid login credentials based on the server's response time, potentially leading to unauthorized access."}, {"lang": "es", "value": " La versi\u00f3n 2.17.1 de mudler/localai es vulnerable a un ataque de sincronizaci\u00f3n. Este tipo de ataque de canal lateral permite a un atacante comprometer el sistema criptogr\u00e1fico analizando el tiempo que lleva ejecutar algoritmos criptogr\u00e1ficos. Espec\u00edficamente, en el contexto del manejo de contrase\u00f1as, un atacante puede determinar credenciales de inicio de sesi\u00f3n v\u00e1lidas en funci\u00f3n del tiempo de respuesta del servidor, lo que puede provocar un acceso no autorizado."}], "lastModified": "2024-11-14T14:15:19.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mudler:localai:2.17.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDCAF2D5-46FD-4D8E-B65B-9BE9FDD5D686"}], "operator": "OR"}]}], "sourceIdentifier": "security@huntr.dev"}