Lucene search
HistorySep 17, 2024 - 5:15 p.m.
CVE-2024-8768
vllm library
completions api
denial of service
cve-2024-8768
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
16.3%
A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service.
Related
osv
osv
vLLM denial of service vulnerability
2024-09-17 18:33:26
cve
cve
CVE-2024-8768
2024-09-17 17:15:11
vulnrichment
vulnrichment
github
github
vLLM denial of service vulnerability
2024-09-17 18:33:26
cvelist
cvelist
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
16.3%
Related for NVD:CVE-2024-8768