CVE-2024-24943: 
NixOS vulnerability analysis and mitigation

In JetBrains Toolbox App before version 2.2, a Denial of Service (DoS) attack vulnerability was discovered that could be exploited through a malicious SVG image. The vulnerability was assigned CVE-2024-24943 and was reported by JetBrains s.r.o. (NVD, CVE).

The vulnerability is classified as CWE-400 (Uncontrolled Resource Consumption) with a CVSS v3.1 base score of 5.5 (Medium) according to NVD's assessment. The attack vector is local (AV:L), with low attack complexity (AC:L), requiring no privileges (PR:N) but user interaction (UI:R). The scope is unchanged (S:U), with no impact on confidentiality (C:N) or integrity (I:N), but high impact on availability (A:H) (NVD).

The vulnerability primarily affects system availability through a potential Denial of Service condition. When successfully exploited, the attack could cause resource consumption issues in the JetBrains Toolbox App through the processing of a specially crafted SVG image (NVD).

The vulnerability has been fixed in JetBrains Toolbox App version 2.2. Users are advised to upgrade to this version or later to mitigate the risk (JetBrains Advisory).