CVE-2024-10345: Unauthenticated Denial of Service via…

Record summary

CVE-2024-10345 has a selected CVSS score of 8.7 (high).

Description

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by Karol Więsek.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableYes

Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 11, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
Helix Core Browse Helix / Helix Core Default status: unaffected	CVE List	0.0.0 to < 2024.2	affected
		0.0.0 to < 2024.1	affected
		0.0.0 to < 2023.2	affected
		0.0.0 to < 2023.1	affected
		0.0.0 to < 2022.2	affected
helix_core Browse perforce / helix_core Default status: unknown	CVE List	Before 2024.2	affected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-10345

portal.perforce.com

https://portal.perforce.com/s/detail/a91PA000001SZQTYA4