CVE-2026-119052
CVE-2026-119052 · llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers can send a command such as SET_TENSOR with a length above std::vector::max_size(), triggering an uncaught std::length_error that aborts the process and denies service to all clients.
CVSS 8.7 · Hoch · EPSS 0,6%
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
llama.cpp
- Softwareversionen
- ≥ b2877, < b11935: Betroffen (custom)
Keine Korrektur veröffentlicht
llama.cpp Debian:14
- Softwareversionen
- 10108+dfsg-1
- 10108+dfsg1-1
- 10108+dfsg1-2
- 10192+dfsg-1
- 10192+dfsg-2
- 10192+dfsg-2~exp1
- 10271+dfsg-1
- 10344+dfsg-1
- 10438+dfsg-1
- 1:0.1.2+dfsg-1~exp1
- 1:0.2.0+dfsg1-1
- 1:0.2.0+dfsg1-1~exp1
- 1:0.4.0+dfsg-1
- 1:0.4.1+dfsg-1
- 1:0.5.0+dfsg-1
- 1:0.5.0+dfsg-2
- 1:0.6.0+dfsg-1
- 1:0.6.0+dfsg-2
- 1:0.7.0+dfsg-1
- 1:0.7.0+dfsg-2
- 5151+dfsg-1~exp2
- 5151+dfsg-1~exp3
- 5318+dfsg-1
- 5318+dfsg-2
- 5713+dfsg-1
- 5760+dfsg-1
- 5760+dfsg-2
- 5760+dfsg-3
- 5760+dfsg-4
- 5882+dfsg-1
- 5882+dfsg-2
- 5882+dfsg-3
- 5882+dfsg-3~exp1
- 5882+dfsg-3~exp2
- 5882+dfsg-3~exp3
- 5882+dfsg-4
- 6641+dfsg-1
- 6641+dfsg-2
- 6641+dfsg-3
- 7593+dfsg-1
- 7593+dfsg-2
- 7593+dfsg-3
- 7965+dfsg-1
- 8064+dfsg-1
- 8064+dfsg-2
- 8461+dfsg-1
- 8611+dfsg-1
- 8681+dfsg-1
- 8870+dfsg-1
- 8941+dfsg-1
- 9009+dfsg-1
- 9071+dfsg-1
- 9190+dfsg-1
- 9413+dfsg-1
- 9555+dfsg-1
- 9601+dfsg-1
- 9721+dfsg-1
- 9895+dfsg-1
- 9895+dfsg-2
- 9895+dfsg-3
- 9951+dfsg-1
- 9951+dfsg-2
- 9951+dfsg-3
- Betroffene Versionsbereiche
- ECOSYSTEM: (−∞, +∞)
Keine Korrektur veröffentlicht
Originalquellen
- https://github.com/ggml-org/llama.cpp/pull/31204
- https://github.com/ggml-org/llama.cpp/commit/7ecb57f7adbea2928aa468ad2aecf05b10725ad4
- https://github.com/ggml-org/llama.cpp
- https://github.com/ggml-org/llama.cpp/releases/tag/b11935
- https://github.com/ggml-org/llama.cpp/blob/8542e94350f0ade01644db6f1d1520da3814dafd/ggml/src/ggml-rpc/ggml-rpc.cpp#L344-L356
- https://www.vulncheck.com/advisories/llama-cpp-b2877-before-b11935-ggml-rpc-server-dos-via-oversized-recv-msg-length
- https://nvd.nist.gov/vuln/detail/CVE-2026-119052