Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2024/09/17 6:33 p.m.•53 views

vLLM Denial of Service via the best_of parameter

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS6.8AI score0.00233EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2024/09/17 5:15 p.m.•32 views

CVE-2024-8939

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS0.00233EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/09/17 4:21 p.m.•47 views

CVE-2024-8939 Vllm: denials of service in vllm json web api

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS0.00233EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2024/09/17 8:41 a.m.•17 views

CVE-2024-8939

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS6.7AI score0.00233EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/17 12:00 a.m.•1 views

CVE-2024-8939: Uncontrolled Resource Consumption

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS6.3AI score0.00233EPSS
SaveExploits0References1
Prion
Prion
•added 2017/10/27 1:29 p.m.•25 views

Denial of service

A Denial of Service DoS vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresponsive, via passing a specially crafted payload to the 'params' parameter of the JSON web API...

4CVSS6.3AI score0.01745EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2017/10/27 1:00 p.m.•45 views

CVE-2017-14182

A Denial of Service DoS vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresponsive, via passing a specially crafted payload to the 'params' parameter of the JSON web API...

6.6AI score0.01745EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/27 12:00 a.m.•2 views

CVE-2017-14182: Improper Input Validation

A Denial of Service DoS vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresponsive, via passing a specially crafted payload to the 'params' parameter of the JSON web API...

6.5CVSS6.6AI score0.01745EPSS
SaveExploits0References2
Rows per page
Query Builder