Lucene search
+L

10 matches found

Github Security Blog
Github Security Blog
•added 2024/09/17 6:33 p.m.•61 views

vLLM Denial of Service via the best_of parameter

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS6.8AI score0.00233EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2024/09/17 5:15 p.m.•34 views

CVE-2024-8939

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS0.00233EPSS
SaveExploits0References2
Mend
Mend
•added 2024/09/17 4:21 p.m.•3 views

CVE-2024-8939

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.9CVSS0.00233EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2024/09/17 4:21 p.m.•49 views

CVE-2024-8939 Vllm: denials of service in vllm json web api

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS0.00233EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2024/09/17 8:41 a.m.•20 views

CVE-2024-8939

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS6.7AI score0.00233EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/17 12:00 a.m.•4 views

CVE-2024-8939: Uncontrolled Resource Consumption

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.2CVSS6.3AI score0.00233EPSS
SaveExploits0References1
Prion
Prion
•added 2017/10/27 1:29 p.m.•26 views

Denial of service

A Denial of Service DoS vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresponsive, via passing a specially crafted payload to the 'params' parameter of the JSON web API...

4CVSS6.3AI score0.01745EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2017/10/27 1:00 p.m.•46 views

CVE-2017-14182

A Denial of Service DoS vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresponsive, via passing a specially crafted payload to the 'params' parameter of the JSON web API...

6.6AI score0.01745EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/27 12:00 a.m.•7 views

CVE-2017-14182: Improper Input Validation

A Denial of Service DoS vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresponsive, via passing a specially crafted payload to the 'params' parameter of the JSON web API...

6.5CVSS6.6AI score0.01745EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/10/24 12:00 a.m.•3 views

PT-2017-3084

Name of the Vulnerable Software and Affected Versions FortiOS versions 5.4.0 through 5.4.5 Description The issue is caused by insufficient input validation in the FortiOS operating system. An attacker can exploit this by sending a specially crafted string to the params parameter of the JSON web...

6.5CVSS0.01745EPSS
SaveExploits0References9
Rows per page
Query Builder