Denial Of Service (DoS)

🗓️ 17 Sep 2025 07:10:43Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 29 Views

vllm is vulnerable to denial of service from oversized headers in get requests, exhausting memory and causing unresponsiveness.

Reporter	Title	Published	Views	Family All 39
BDU FSTEC	vLLM Uncontrolled Resource Consumption DoS	13 May 202600:00	–	bdu_fstec
Chainguard	CVE-2025-48956 vulnerabilities	29 Aug 202502:18	–	cgr
Circl	CVE-2025-48956	22 Aug 202521:57	–	circl
CNNVD	vLLM Resource Management Error Vulnerability	21 Aug 202500:00	–	cnnvd
CVE	CVE-2025-48956	21 Aug 202514:41	–	cve
Cvelist	CVE-2025-48956 vLLM API endpoints vulnerable to Denial of Service Attacks	21 Aug 202514:41	–	cvelist
EUVD	EUVD-2025-25446	3 Oct 202520:07	–	euvd
Github Security Blog	vllm API endpoints vulnerable to Denial of Service Attacks	21 Aug 202514:24	–	github
NVD	CVE-2025-48956	21 Aug 202515:15	–	nvd
osv_cga	CGA-42HC-7RGR-F37P	4 Sep 202500:11	–	osv_cga

Vulners

Node

vllm vllmRange0.0.1–0.10.1python

vllm vllmMatch0.1.0python

vllm vllmMatch0.1.1python

vllm vllmMatch0.1.2python

vllm vllmMatch0.1.3python

vllm vllmMatch0.1.4python

vllm vllmMatch0.1.5python

vllm vllmMatch0.1.6python

vllm vllmMatch0.1.7python

vllm vllmMatch0.10.0python

vllm vllmMatch0.2.0python

vllm vllmMatch0.2.1python

vllm vllmMatch0.2.1.post1python

vllm vllmMatch0.2.2python

vllm vllmMatch0.2.3python

vllm vllmMatch0.2.4python

vllm vllmMatch0.2.5python

vllm vllmMatch0.2.6python

vllm vllmMatch0.2.7python

vllm vllmMatch0.3.0python

vllm vllmMatch0.3.1python

vllm vllmMatch0.3.2python

vllm vllmMatch0.3.3python

vllm vllmMatch0.4.0python

vllm vllmMatch0.4.0.post1python

vllm vllmMatch0.4.1python

vllm vllmMatch0.4.2python

vllm vllmMatch0.4.3python

vllm vllmMatch0.5.0python

vllm vllmMatch0.5.0.post1python

vllm vllmMatch0.5.1python

vllm vllmMatch0.5.2python

vllm vllmMatch0.5.3python

vllm vllmMatch0.5.3.post1python

vllm vllmMatch0.5.4python

vllm vllmMatch0.5.5python

vllm vllmMatch0.6.0python

vllm vllmMatch0.6.1python

vllm vllmMatch0.6.1.post1python

vllm vllmMatch0.6.1.post2python

vllm vllmMatch0.6.2python

vllm vllmMatch0.6.3python

vllm vllmMatch0.6.3.post1python

vllm vllmMatch0.6.4python

vllm vllmMatch0.6.4.post1python

vllm vllmMatch0.6.5python

vllm vllmMatch0.6.6python

vllm vllmMatch0.6.6.post1python

vllm vllmMatch0.7.0python

vllm vllmMatch0.7.1python

vllm vllmMatch0.7.2python

vllm vllmMatch0.7.3python

vllm vllmMatch0.8.0python

vllm vllmMatch0.8.1python

vllm vllmMatch0.8.2python

vllm vllmMatch0.8.3python

vllm vllmMatch0.8.4python

vllm vllmMatch0.8.5python

vllm vllmMatch0.8.5.post1python

vllm vllmMatch0.9.0python

vllm vllmMatch0.9.0.1python

vllm vllmMatch0.9.1python

vllm vllmMatch0.9.2python

vllm vllmRange0.1.0–0.10.1python

Source	Link
github	www.github.com/vllm-project/vllm/commit/d8b736f913a59117803d6701521d2e4861701944
github	www.github.com/vllm-project/vllm/pull/23267
github	www.github.com/vllm-project/vllm/security/advisories/GHSA-rxc4-3w6r-4v47
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-48956
github	www.github.com/vllm-project/vllm

08 Aug 2026 17:58Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00565

SSVC