This vulnerability (CWE-770) in Kron PAM involves allocation of resources without proper limits or throttling, which can be exploited over HTTP to cause a denial of service condition. The issue affects versions prior to 3.7 of Kron PAM. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, and impacting availability only. No patch or official fix information is provided in the available data.

An attacker with low privileges can exploit this vulnerability remotely over the network to cause denial of service by exhausting system resources. The impact is limited to availability disruption; confidentiality and integrity are not affected. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing network-level protections such as rate limiting or HTTP request throttling to mitigate potential denial of service attempts. Monitor for updates from Kron Technologies regarding patches or official mitigations.