Denial Of Service (DoS)

🗓️ 17 Sep 2025 07:10:43Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 7 Views

vllm is vulnerable to denial of service from oversized headers in get requests, exhausting memory and causing unresponsiveness.

Reporter	Title	Published	Views	Family All 32
BDU FSTEC	The vulnerability of the vLLM library for working with large language models involves uncontrolled resource consumption, allowing attackers to trigger a service failure.	13 May 202600:00	–	bdu_fstec
Chainguard	CVE-2025-48956 vulnerabilities	29 Aug 202502:18	–	cgr
Circl	CVE-2025-48956	22 Aug 202521:57	–	circl
CNNVD	vLLM 资源管理错误漏洞	21 Aug 202500:00	–	cnnvd
CVE	CVE-2025-48956	21 Aug 202514:41	–	cve
Cvelist	CVE-2025-48956 vLLM API endpoints vulnerable to Denial of Service Attacks	21 Aug 202514:41	–	cvelist
EUVD	EUVD-2025-25446	3 Oct 202520:07	–	euvd
Github Security Blog	vllm API endpoints vulnerable to Denial of Service Attacks	21 Aug 202514:24	–	github
NVD	CVE-2025-48956	21 Aug 202515:15	–	nvd
OSV	CGA-42HC-7RGR-F37P	4 Sep 202500:11	–	osv

Vulners

Node

vllm vllmRange0.0.1–0.10.1python

vllm vllmMatch0.1.0python

vllm vllmMatch0.1.1python

vllm vllmMatch0.1.2python

vllm vllmMatch0.1.3python

vllm vllmMatch0.1.4python

vllm vllmMatch0.1.5python

vllm vllmMatch0.1.6python

vllm vllmMatch0.1.7python

vllm vllmMatch0.10.0python

vllm vllmMatch0.2.0python

vllm vllmMatch0.2.1python

vllm vllmMatch0.2.1.post1python

vllm vllmMatch0.2.2python

vllm vllmMatch0.2.3python

vllm vllmMatch0.2.4python

vllm vllmMatch0.2.5python

vllm vllmMatch0.2.6python

vllm vllmMatch0.2.7python

vllm vllmMatch0.3.0python

vllm vllmMatch0.3.1python

vllm vllmMatch0.3.2python

vllm vllmMatch0.3.3python

vllm vllmMatch0.4.0python

vllm vllmMatch0.4.0.post1python

vllm vllmMatch0.4.1python

vllm vllmMatch0.4.2python

vllm vllmMatch0.4.3python

vllm vllmMatch0.5.0python

vllm vllmMatch0.5.0.post1python

vllm vllmMatch0.5.1python

vllm vllmMatch0.5.2python

vllm vllmMatch0.5.3python

vllm vllmMatch0.5.3.post1python

vllm vllmMatch0.5.4python

vllm vllmMatch0.5.5python

vllm vllmMatch0.6.0python

vllm vllmMatch0.6.1python

vllm vllmMatch0.6.1.post1python

vllm vllmMatch0.6.1.post2python

vllm vllmMatch0.6.2python

vllm vllmMatch0.6.3python

vllm vllmMatch0.6.3.post1python

vllm vllmMatch0.6.4python

vllm vllmMatch0.6.4.post1python

vllm vllmMatch0.6.5python

vllm vllmMatch0.6.6python

vllm vllmMatch0.6.6.post1python

vllm vllmMatch0.7.0python

vllm vllmMatch0.7.1python

vllm vllmMatch0.7.2python

vllm vllmMatch0.7.3python

vllm vllmMatch0.8.0python

vllm vllmMatch0.8.1python

vllm vllmMatch0.8.2python

vllm vllmMatch0.8.3python

vllm vllmMatch0.8.4python

vllm vllmMatch0.8.5python

vllm vllmMatch0.8.5.post1python

vllm vllmMatch0.9.0python

vllm vllmMatch0.9.0.1python

vllm vllmMatch0.9.1python

vllm vllmMatch0.9.2python

vllm vllmRange0.1.0–0.10.1python

Source	Link
github	www.github.com/vllm-project/vllm/commit/d8b736f913a59117803d6701521d2e4861701944
github	www.github.com/vllm-project/vllm/pull/23267
github	www.github.com/vllm-project/vllm/security/advisories/GHSA-rxc4-3w6r-4v47
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-48956
github	www.github.com/vllm-project/vllm

01 Aug 2026 18:55Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.5

EPSS0.0056

SSVC