CVE-2024-36734
📋 TL;DR
This vulnerability in OneFlow v0.9.1 allows attackers to cause Denial of Service (DoS) by sending negative values to the dim parameter. The improper input validation enables crashing or freezing of the affected service. Users running vulnerable versions of OneFlow are affected.
💻 Affected Systems
- OneFlow-Inc. Oneflow
📦 What is this software?
Oneflow by Oneflow
⚠️ Risk & Real-World Impact
Worst Case
Complete service unavailability requiring restart or recovery procedures, potentially disrupting dependent applications.
Likely Case
Service crashes or becomes unresponsive, requiring manual intervention to restore functionality.
If Mitigated
Minimal impact with proper input validation and monitoring in place.
🎯 Exploit Status
Simple exploitation requiring only sending negative values to the vulnerable parameter.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: v0.9.2 or later
Vendor Advisory: https://github.com/Oneflow-Inc/oneflow
Restart Required: Yes
Instructions:
1. Check current version with 'pip show oneflow'. 2. Upgrade using 'pip install --upgrade oneflow>=0.9.2'. 3. Restart all OneFlow services.
🔧 Temporary Workarounds
Input Validation Filter
allImplement input validation to reject negative values for dim parameter
# Add validation in code before processing dim parameter
# Example: if dim < 0: raise ValueError('dim must be non-negative')
🧯 If You Can't Patch
- Implement network-level filtering to block requests with negative parameter values
- Deploy rate limiting and monitoring to detect DoS attempts
🔍 How to Verify
Check if Vulnerable:
Check if running OneFlow v0.9.1 with 'pip show oneflow' or 'python -c "import oneflow; print(oneflow.__version__)"'Check Version:
python -c "import oneflow; print(oneflow.__version__)"Verify Fix Applied:
Confirm version is v0.9.2 or higher and test with negative dim values to ensure proper error handling📡 Detection & Monitoring
Log Indicators:
- Error logs containing 'dim' parameter with negative values
- Service crash/restart logs
- Unusual parameter values in request logs
Network Indicators:
- HTTP requests with negative parameter values
- Increased error response rates
SIEM Query:
source="*oneflow*" AND ("dim=-*" OR "negative dim" OR "service crash")