Denial of Service Vulnerability in Berriai/Litellm Affects All Users

CVE-2024-8984

Summary

A Denial of Service (DoS) vulnerability exists in Berriai's Litellm software version v1.44.5, where an attacker can exploit the vulnerability by appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request. This manipulation leads to the server continuously processing each additional character, causing excessive resource consumption. The result is a degraded service performance or complete unavailability for all users, as this vulnerability is exploitable without authentication or user interaction.

References