Intel

AIKIDO-2024-10439

viztracer is vulnerable to Denial of Service (DoS)

Denial of Service (DoS) Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Nov 13, 2024

28

Low Risk

This Affects:

pythonviztracer
0.0.3 - 0.17.0
Fixed in 0.17.1
Are you affected? Scan for Free

TL;DR

Affected versions of this package are vulnerable to Denial of Service (DoS) attacks due to unexpected segmentation faults in the trace functionality. This can lead to application crashes and service unavailability when certain conditions trigger these faults.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

viztracer is vulnerable to Denial of Service (DoS) in versions 0.0.3 - 0.17.0.

How to fix this

Upgrade the viztracer library to the patch version.