Threats tagged 'brew-icloudpd-cve-2024-49769'

CVE-2024-49769 is a denial-of-service vulnerability in the waitress server used by icloudpd. When a remote client closes the connection prematurely, waitress fails to clean up the socket properly, causing the main thread to enter a busy loop attempting to write to a non-existent socket. This leads to high CPU usage and resource exhaustion. The issue affects icloudpd versions from 1.21.0 up to but not including 1.25.1. Waitress 3.0.1 includes a fix that resolves this race condition. No workarounds are available.