60 matches found
OpenVINO™ Model Server Software Advisory
Summary: Potential security vulnerability in the OpenVINO™ model server software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-32048 Description: Improper input validation in the OpenVINO™ Model...
OpenVINO Model Server DoS
The vulnerability of the deployment and model management software for deep learning in the Intel Distribution of OpenVINO Model Server is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures...
CVE-2024-32048
CVE-2024-32048 affects the Intel OpenVINO Model Server (before 2024.0). The issue is improper input validation that may allow an unauthenticated user to cause a denial of service via adjacent access. Impact is primarily availability (high) with no confidentiality or integrity impact per the CVSS ...
CVE-2024-32048
Improper input validation in the IntelR Distribution of OpenVINOTM Model Server software before version 2024.0 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2024-32048: Improper Input Validation
Improper input validation in the IntelR Distribution of OpenVINOTM Model Server software before version 2024.0 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
PT-2024-8841
Name of the Vulnerable Software and Affected Versions: IntelR Distribution of OpenVINOTM Model Server versions prior to 2024.0 Description: The issue is related to improper input validation in the software, which may allow an unauthenticated user to potentially enable denial of service via adjace...
CVE-2024-8939 Vllm: denials of service in vllm json web api
A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...
VulnCheck KEV: CVE-2020-1375
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'...
CVE-2023-31203
Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially enable denial of service via network access...
Input validation
Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2023-31203
Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2023-31203
The CVE-2023-31203 issue affects OpenVINO Model Server software prior to version 2022.3. The root cause is improper input validation in the model server component, which may allow an unauthenticated attacker to trigger a denial of service via network access. The advisory and multiple feeds confir...
CVE-2023-31203: Improper Input Validation
Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially enable denial of service via network access...
PT-2023-23228 · Intel · Openvino Model Server
Name of the Vulnerable Software and Affected Versions: OpenVINO Model Server versions prior to 2022.3 Description: The issue is related to improper input validation in the OpenVINO Model Server software, which may allow an unauthenticated user to potentially enable denial of service via network...
Intel® OpenVINO™ Software Advisory
Summary: Potential security vulnerabilities in some Intel® OpenVINO™ software may allow denial of service, information disclosure. Intel is releasing sotfware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25080 Description: Protection mechanism failur...
PyTorch Model Server Registration / Deserialization Remote Code Execution Exploit
The PyTorch model server contains multiple vulnerabilities that can be chained together to permit an unauthenticated remote attacker arbitrary Java code execution. The first vulnerability is that the management interface is bound to all IP addresses and not just the loop back interface as the...
PyTorch Model Server Registration / Deserialization Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/zip' class MetasploitModule 'PyTorch Model Server Registration and Deserialization RCE', 'Description' = %q The PyTorch model server contains multiple...
PyTorch Model Server Registration and Deserialization RCE
The PyTorch model server contains multiple vulnerabilities that can be chained together to permit an unauthenticated remote attacker arbitrary Java code execution. The first vulnerability is that the management interface is bound to all IP addresses and not just the loop back interface as the...