Liankee

Name of the Vulnerable Software and Affected Versions: LLaMA-Factory versions up to and including 0.9.3 Description: A remote code execution issue was discovered in LLaMA-Factory during the training process. This issue arises because the `vhead file` is loaded without proper safeguards, allowing malicious attackers to execute arbitrary malicious code on the host system by passing a malicious `Checkpoint path` parameter through the "WebUI" interface. The attack is stealthy, as the victim remains unaware of the exploitation. The root cause is that the `vhead file` argument is loaded without the secure parameter `weights only=True`. Recommendations: For versions up to and including 0.9.3, upgrade to version 0.9.4 to patch the issue. As a temporary workaround, consider setting the `weights only=True` parameter when loading the `vhead file` argument to prevent exploitation. Restrict access to the `WebUI` interface to minimize the risk of exploitation until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Eclipse Jetty versions prior to 9.4.54 Eclipse Jetty versions prior to 10.0.18 Eclipse Jetty versions prior to 11.0.18 Eclipse Jetty versions prior to 12.0.3 **Description** The vulnerability in Jetty's DosFilter can be exploited by unauthorized users to cause a remote denial-of-service (DoS) attack on the server. By repeatedly sending crafted requests, attackers can trigger OutOfMemory errors and exhaust the server's memory. The DoSFilter is designed to protect web applications against certain types of DoS attacks, but its internal tracking of requests is the source of this OutOfMemory condition. Users of the DoSFilter may be subject to DoS attacks that will ultimately exhaust the memory of the server if they have not configured session passivation or an aggressive session inactivation timeout. **Recommendations** For Eclipse Jetty versions prior to 9.4.54, update to version 9.4.54 or later. For Eclipse Jetty versions prior to 10.0.18, update to version 10.0.18 or later. For Eclipse Jetty versions prior to 11.0.18, update to version 11.0.18 or later. For Eclipse Jetty versions prior to 12.0.3, update to version 12.0.3 or later. As a temporary workaround, consider configuring session passivation or an aggressive session inactivation timeout to mitigate the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** RabbitMQ Java client versions prior to 5.18.0 **Description** The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. `maxBodyLebgth` was not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may suffer from DoS attacks from RabbitMQ Java client which will ultimately exhaust the memory of the consumer. **Recommendations** To resolve the issue, update to version 5.18.0 or later. As a temporary workaround, consider restricting the size of messages received by the RabbitMQ Java client to prevent memory overflow. Restrict access to the RabbitMQ Java client to minimize the risk of exploitation.