Skip to content
Threat Feed
Subscribe

Product

LMDeploy (<= 0.17.0)

1 brief RSS
low advisory

Denial of Service Vulnerability in InternLM LMDeploy

InternLM LMDeploy version 0.17.0 and earlier is vulnerable to a denial-of-service attack due to improper session management in DistServe mode, allowing unauthenticated attackers to cause an out-of-memory failure on the prefill worker.

LMDeploy
1t 1c