Intel OpenVINO Model Server Uncontrolled Resource Consumption Vulnerability
A vulnerability in Intel's OpenVINO Model Server software before version 2024.4 allows unauthenticated users with adjacent network access to potentially trigger denial of service. Intel released patched version 2024.4 in response.
What happened
Uncontrolled resource consumption in Intel's OpenVINO model server software before version 2024.4 may allow an unauthenticated user to trigger denial of service via adjacent access.
Reported impact
The vulnerability could enable denial of service attacks against systems running affected versions of the OpenVINO model server.
Index analysis
The vulnerability has a CVSS 3.1 score of 6.5 (Medium) and CVSS 4.0 score of 7.1 (High), indicating moderate to significant severity. The vulnerability requires adjacent network access and affects availability.
Governance controls
Intel released software updates to version 2024.4 or later to mitigate the vulnerability. The issue was reported by 021w in 360 Vulnerability Research Institution and disclosed through coordinated disclosure practices.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.