Denial Of Service (DoS)

🗓️ 24 Mar 2025 08:34:23Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 7 Views

vllm has a DoS vulnerability due to the unlimited use of Outlines grammar cache, risking filesystem exhaustion.

Reporter	Title	Published	Views	Family All 19
Chainguard	CVE-2025-29770 vulnerabilities	22 Mar 202510:12	–	cgr
Circl	CVE-2025-29770	19 Mar 202518:43	–	circl
CNNVD	vLLM 安全漏洞	19 Mar 202500:00	–	cnnvd
CVE	CVE-2025-29770	19 Mar 202515:31	–	cve
Cvelist	CVE-2025-29770 vLLM denial of service via outlines unbounded cache on disk	19 Mar 202515:31	–	cvelist
EUVD	EUVD-2025-6726	3 Oct 202520:07	–	euvd
Github Security Blog	vLLM denial of service via outlines unbounded cache on disk	19 Mar 202515:52	–	github
NVD	CVE-2025-29770	19 Mar 202516:15	–	nvd
OSV	CGA-27RG-PPH7-PHXJ	31 Mar 202515:59	–	osv
OSV	CGA-FWXF-FWFG-7QVV	31 Mar 202516:04	–	osv

Vulners

Node

vllm vllmRange0.5.2–0.7.3python

vllm vllmMatch0.0.1python

vllm vllmMatch0.1.0python

vllm vllmMatch0.1.1python

vllm vllmMatch0.1.2python

vllm vllmMatch0.1.3python

vllm vllmMatch0.1.4python

vllm vllmMatch0.1.5python

vllm vllmMatch0.1.6python

vllm vllmMatch0.1.7python

vllm vllmMatch0.2.0python

vllm vllmMatch0.2.1python

vllm vllmMatch0.2.1.post1python

vllm vllmMatch0.2.2python

vllm vllmMatch0.2.3python

vllm vllmMatch0.2.4python

vllm vllmMatch0.2.5python

vllm vllmMatch0.2.6python

vllm vllmMatch0.2.7python

vllm vllmMatch0.3.0python

vllm vllmMatch0.3.1python

vllm vllmMatch0.3.2python

vllm vllmMatch0.3.3python

vllm vllmMatch0.4.0python

vllm vllmMatch0.4.0.post1python

vllm vllmMatch0.4.1python

vllm vllmMatch0.4.2python

vllm vllmMatch0.4.3python

vllm vllmMatch0.5.0python

vllm vllmMatch0.5.0.post1python

vllm vllmMatch0.5.1python

vllm vllmMatch0.5.2python

vllm vllmMatch0.5.3python

vllm vllmMatch0.5.3.post1python

vllm vllmMatch0.5.4python

vllm vllmMatch0.5.5python

vllm vllmMatch0.6.0python

vllm vllmMatch0.6.1python

vllm vllmMatch0.6.1.post1python

vllm vllmMatch0.6.1.post2python

vllm vllmMatch0.6.2python

vllm vllmMatch0.6.3python

vllm vllmMatch0.6.3.post1python

vllm vllmMatch0.6.4python

vllm vllmMatch0.6.4.post1python

vllm vllmMatch0.6.5python

vllm vllmMatch0.6.6python

vllm vllmMatch0.6.6.post1python

vllm vllmMatch0.7.0python

vllm vllmMatch0.7.1python

vllm vllmMatch0.7.2python

Source	Link
github	www.github.com/vllm-project/vllm/blob/53be4a863486d02bd96a59c674bbec23eec508f6/vllm/model_executor/guided_decoding/outlines_logits_processors.py
github	www.github.com/vllm-project/vllm/security/advisories/GHSA-mgrm-fgjv-mhv8
github	www.github.com/vllm-project/vllm/pull/14837
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-29770
github	www.github.com/vllm-project/vllm

13 Dec 2025 07:54Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.5

EPSS0.00658

SSVC