446 matches found
bentoutils (0.0.10), ersilia (>=0.0.1, <=0.0.3) +3 more potentially affected by CVE-2024-4940 via bentoml (0.9.2)
bentoml PYPI version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on bentoml and may be impacted: - bentoutils 0.0.10 - ersilia =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2024-4940 Source advisory: OSV:GHSA-564P-RX2Q-4C8V...
CVE-2024-9056
BentoML version v1.3.4post1 is vulnerable to a Denial of Service DoS attack. The vulnerability can be exploited by appending characters, such as dashes -, to the end of a multipart boundary in an HTTP request. This causes the server to continuously process each character, leading to excessive...
CVE-2024-9070
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions =1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is...
CVE-2024-12759
Rejected reason: REJECT DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-8966. Notes: All CVE users should reference CVE-2024-8966 instead of this CVE Record. All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2024-9070 Deserialization Vulnerability in BentoML's Runner Server in bentoml/bentoml
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions =1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is...
CVE-2024-9070
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions =1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is...
CVE-2024-9070 Deserialization Vulnerability in BentoML's Runner Server in bentoml/bentoml
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions =1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is...
CVE-2024-9070
The CVE-2024-9070 issue concerns BentoML’s runner server (bentoml/bentoml) with versions up to and including 1.3.4.post1. A deserialization vulnerability allowed remote attackers to trigger arbitrary code execution by sending a crafted pickle payload when args-number > 1, leading to automatic ...
CVE-2024-9056 Denial of Service in bentoml/bentoml
BentoML version v1.3.4post1 is vulnerable to a Denial of Service DoS attack. The vulnerability can be exploited by appending characters, such as dashes -, to the end of a multipart boundary in an HTTP request. This causes the server to continuously process each character, leading to excessive...
CVE-2024-9056
CVE-2024-9056 affects BentoML v1.3.4post1 and is a Denial of Service (DoS) caused by improper handling of multipart boundaries. An attacker can append characters to the end of a multipart boundary in HTTP requests, causing the server to repeatedly process input and exhaust resources, leading to s...
CVE-2024-9056
BentoML version v1.3.4post1 is vulnerable to a Denial of Service DoS attack. The vulnerability can be exploited by appending characters, such as dashes -, to the end of a multipart boundary in an HTTP request. This causes the server to continuously process each character, leading to excessive...
CVE-2024-9056 Denial of Service in bentoml/bentoml
BentoML version v1.3.4post1 is vulnerable to a Denial of Service DoS attack. The vulnerability can be exploited by appending characters, such as dashes -, to the end of a multipart boundary in an HTTP request. This causes the server to continuously process each character, leading to excessive...
BentoML command injection vulnerability
Horovod is an open source distributed deep learning training framework designed to improve the training efficiency and scalability of large-scale deep learning models. Horovod suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code on a...
Number withdrawal
BentoML is an open source modeling service library from BentoML Open Source. For building high-performance and scalable AI applications using Python. This CVE number has been withdrawn...
Number withdrawal
BentoML is an open source modeling service library from BentoML Open Source. For building high-performance and scalable AI applications using Python. This CVE number has been withdrawn...
CVE-2024-9056: Allocation of Resources Without Limits or Throttling
BentoML version v1.3.4post1 is vulnerable to a Denial of Service DoS attack. The vulnerability can be exploited by appending characters, such as dashes -, to the end of a multipart boundary in an HTTP request. This causes the server to continuously process each character, leading to excessive...
PT-2025-12264
Name of the Vulnerable Software and Affected Versions bentoml/bentoml versions prior to 1.3.4.post1 Description A deserialization issue exists in the BentoML runner server. By configuring specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm...