CVE-2024-10314: Unauthenticated Denial of Service via Auto…

Record summary

CVE-2024-10314 has a selected CVSS score of 8.7 (high).

Description

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the auto-generation function was identified. Reported by Karol Więsek.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableYes

Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 11, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
Helix Core Browse Helix / Helix Core Default status: unaffected	CVE List	0.0.0 to < 2024.2	affected
		0.0.0 to < 2024.1	affected
		0.0.0 to < 2023.2	affected
		0.0.0 to < 2023.1	affected
		0.0.0 to < 2022.2	affected
helix_core Browse perforce / helix_core Default status: unknown	CVE List	Before 2024.2	affected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-10314

portal.perforce.com

https://portal.perforce.com/s/detail/a91PA000001SZNFYA4