CVE-2024-9053 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

CVE-2024-9053

creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:50+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhyk3ix2a 2025-03-20 12:48:34+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114194835956455437...

CVE-2024-9053 Remote Code Execution in vllm-project/vllm

vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer RPC server entrypoints. The core functionality runserverloop calls the function makehandlercoro, which directly uses cloudpickle.loads on received messages without any sanitization. This can result in remote code...

CVE-2024-9053 Remote Code Execution in vllm-project/vllm

vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer RPC server entrypoints. The core functionality runserverloop calls the function makehandlercoro, which directly uses cloudpickle.loads on received messages without any sanitization. This can result in remote code...