Denial of Service Vulnerability in ilab Model Serve Component by Red Hat

CVE-2024-8939

Summary

A vulnerability in the ilab model serve component could be exploited by sending a large value to the best_of parameter in its JSON web API, which is responsible for LLM-based sentence or chat completions. This improper handling can lead to unhandled timeouts and resource exhaustion, allowing attackers to overload the system. As a result, the API may become unresponsive, interrupting access for legitimate users and causing significant service disruptions.

References