CVE-2024-6598

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A denial-of-service attack is possible through the execution functionality of KNIME Business Hub 1.10.0 and 1.10.1. It allows an authenticated attacker with job execution privileges to execute a job that causes internal messages to pile up until there are no more resources available for processing new messages. This leads to an outage of most functionality of KNIME Business Hub. Recovery from the situation is only possible by manual administrator interaction. Please contact our support for instructions in case you have run into this situation.

Updating to KNIME Business Hub 1.10.2 or later solves the problem.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published: Jul 9, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-65994.3The Meks Video Importer plugin for WordPress is vulnerable to unauthorized API key modification due to a missing capability check on the aja CVE-2024-66006.3Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 819 CVE-2024-66014.7A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox < CVE-2024-66029.8A mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 11 CVE-2024-66037.4In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption CVE-2024-66047.5Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corrupti CVE-2024-66058.8Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox CVE-2024-66068.2Clipboard code failed to check the index on an array access. This could have led to an out-of-bounds read. This vulnerability affects Firefo CVE-2024-66078.8It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `<sele CVE-2024-66084.3It was possible to move the cursor using pointerlock from an iframe. This allowed moving the cursor outside of the viewport and the Firefox CVE-2024-66098.8When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox < CVE-2024-66104.3Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from ex