7.5
Élevée
CVE-2024-8768 A flaw was found in the vLLM library
Description
A flaw was found in the vLLM library. A completions API request with an empty prompt will crash the vLLM API server, resulting in a denial of service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux AI (RHEL AI) | Versions non publiées |
Références
- access.redhat.com access.redhat.com
- RHBZ#2311895 bugzilla.redhat.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Enterprise Linux AI (RHEL AI)
Les 6 CVE de Red Hat Enterprise Linux AI (RHEL AI) →
CVE-2025-6242
A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's…
7.1
Élevée
CVE-2025-8556
A flaw was found in CIRCL's implementation of the FourQ elliptic curve
3.7
Faible
CVE-2024-11079
Ansible-core: unsafe tagging bypass via hostvars object in ansible-core
5.5
Moyenne
CVE-2024-8939
A vulnerability was found in the ilab model serve component, where improper handling of the best_of parameter in the…
6.2
Moyenne