CVE-2024-8049 Telerik Document Processing Improper Handling of Memory Resources
Attackers can cause denial of service by importing documents with unsupported features, exhausting computing resources in applications using Telerik Document Processing Libraries.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-8049?
CVE-2024-8049 is a medium-severity denial of service vulnerability in Progress Software Telerik Document Processing Libraries, published on 13 Nov 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 (2024.4.1106), importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable.
Weakness: CWE-834
Which versions are affected by CVE-2024-8049?
It affects 1 product.
Products include Progress Telerik Document Processing Libraries.
How do I fix CVE-2024-8049?
No fix has been published for CVE-2024-8049 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-8049 being exploited?
There is no known exploitation of CVE-2024-8049 in the wild and no public exploit code.
Other vulnerabilities in Progress Software Telerik Document Processing Libraries
Sources
Also known as GHSA-47xc-86q6-rh6j.