CVE-2024-36740
📋 TL;DR
This vulnerability in OneFlow v0.9.1 allows attackers to cause Denial of Service (DoS) by providing a negative index that exceeds the valid range, potentially crashing the application. It affects systems running OneFlow v0.9.1. The issue stems from improper validation of array index bounds.
💻 Affected Systems
- OneFlow
📦 What is this software?
Oneflow by Oneflow
⚠️ Risk & Real-World Impact
Worst Case
Complete service disruption with application crashes, requiring manual restart and potentially causing data loss or corruption.
Likely Case
Service degradation or temporary unavailability until the application is restarted.
If Mitigated
Minimal impact if proper input validation and error handling are implemented.
🎯 Exploit Status
The exploit requires sending specially crafted input to trigger the negative index condition.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: v0.9.2 or later
Vendor Advisory: https://github.com/Oneflow-Inc/oneflow
Restart Required: Yes
Instructions:
1. Check current OneFlow version. 2. Update to v0.9.2 or later via package manager or manual installation. 3. Restart OneFlow services.
🔧 Temporary Workarounds
Input Validation Filter
allImplement input validation to reject negative indices or out-of-range values before processing.
🧯 If You Can't Patch
- Implement network-level controls to restrict access to OneFlow services.
- Deploy application-level firewalls or WAFs to filter malicious input patterns.
🔍 How to Verify
Check if Vulnerable:
Check if OneFlow version is exactly v0.9.1 using version command or package manager.Check Version:
python -c "import oneflow; print(oneflow.__version__)"Verify Fix Applied:
Confirm version is v0.9.2 or later and test with known exploit payloads.📡 Detection & Monitoring
Log Indicators:
- Application crash logs
- Error messages related to index out of bounds or negative indices
Network Indicators:
- Unusual traffic patterns to OneFlow endpoints with malformed data
SIEM Query:
source="oneflow.log" AND ("index out of range" OR "negative index" OR "crash")