Timing Side-channel Attacks

🗓️ 02 Jun 2025 04:45:25Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 6 Views

vllm is vulnerable to Timing side-channel attacks via the PageAttention mechanism's prefill phase.

Reporter	Title	Published	Views	Family All 19
Chainguard	CVE-2025-46570 vulnerabilities	30 May 202501:15	–	cgr
Circl	CVE-2025-46570	29 May 202518:07	–	circl
CNNVD	vLLM 安全漏洞	29 May 202500:00	–	cnnvd
CVE	CVE-2025-46570	29 May 202516:32	–	cve
Cvelist	CVE-2025-46570 vLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-Channel	29 May 202516:32	–	cvelist
EUVD	EUVD-2025-16189	3 Oct 202520:07	–	euvd
Github Security Blog	Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching	28 May 202518:02	–	github
NVD	CVE-2025-46570	29 May 202517:15	–	nvd
OSV	CGA-3F59-WPXW-5GH2	6 Jun 202503:47	–	osv
OSV	CGA-67Q9-J5RQ-4J9F	29 Jan 202600:43	–	osv

Vulners

Node

vllm vllmRange0.7.1–0.8.5python

OR

vllm vllmMatch0.0.1python

OR

vllm vllmMatch0.1.0python

OR

vllm vllmMatch0.1.1python

OR

vllm vllmMatch0.1.2python

OR

vllm vllmMatch0.1.3python

OR

vllm vllmMatch0.1.4python

OR

vllm vllmMatch0.1.5python

OR

vllm vllmMatch0.1.6python

OR

vllm vllmMatch0.1.7python

OR

vllm vllmMatch0.2.0python

OR

vllm vllmMatch0.2.1python

OR

vllm vllmMatch0.2.1.post1python

OR

vllm vllmMatch0.2.2python

OR

vllm vllmMatch0.2.3python

OR

vllm vllmMatch0.2.4python

OR

vllm vllmMatch0.2.5python

OR

vllm vllmMatch0.2.6python

OR

vllm vllmMatch0.2.7python

OR

vllm vllmMatch0.3.0python

OR

vllm vllmMatch0.3.1python

OR

vllm vllmMatch0.3.2python

OR

vllm vllmMatch0.3.3python

OR

vllm vllmMatch0.4.0python

OR

vllm vllmMatch0.4.0.post1python

OR

vllm vllmMatch0.4.1python

OR

vllm vllmMatch0.4.2python

OR

vllm vllmMatch0.4.3python

OR

vllm vllmMatch0.5.0python

OR

vllm vllmMatch0.5.0.post1python

OR

vllm vllmMatch0.5.1python

OR

vllm vllmMatch0.5.2python

OR

vllm vllmMatch0.5.3python

OR

vllm vllmMatch0.5.3.post1python

OR

vllm vllmMatch0.5.4python

OR

vllm vllmMatch0.5.5python

OR

vllm vllmMatch0.6.0python

OR

vllm vllmMatch0.6.1python

OR

vllm vllmMatch0.6.1.post1python

OR

vllm vllmMatch0.6.1.post2python

OR

vllm vllmMatch0.6.2python

OR

vllm vllmMatch0.6.3python

OR

vllm vllmMatch0.6.3.post1python

OR

vllm vllmMatch0.6.4python

OR

vllm vllmMatch0.6.4.post1python

OR

vllm vllmMatch0.6.5python

OR

vllm vllmMatch0.6.6python

OR

vllm vllmMatch0.6.6.post1python

OR

vllm vllmMatch0.7.0python

OR

vllm vllmMatch0.7.1python

OR

vllm vllmMatch0.7.2python

OR

vllm vllmMatch0.7.3python

OR

vllm vllmMatch0.8.0python

OR

vllm vllmMatch0.8.1python

OR

vllm vllmMatch0.8.2python

OR

vllm vllmMatch0.8.3python

OR

vllm vllmMatch0.8.4python

OR

vllm vllmMatch0.8.5.post1python

Source	Link
github	www.github.com/pypa/advisory-database/tree/main/vulns/vllm/PYSEC-2025-53.yaml
github	www.github.com/vllm-project/vllm/commit/77073c77bc2006eb80ea6d5128f076f5e6c6f54f
github	www.github.com/vllm-project/vllm/security/advisories/GHSA-4qjh-9fv9-r85r
github	www.github.com/vllm-project/vllm/pull/17045
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-46570
github	www.github.com/vllm-project/vllm

13 Dec 2025 07:10Current

3.7Low risk

Vulners AI Score3.7

CVSS 3.12.6

EPSS0.00177

SSVC

timing side-channel attacks vllm vulnerability pageattention mechanism token generation prompt similarity