GitHub Advisory DatabaseGHSA-RR46-M366-GM44Null pointer dereference in PaddlePaddle
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
21.3%
Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| paddlepaddle | ge | 0 | |
| paddlepaddle | lt | 2.5.0 |
References
github.com/advisories/GHSA-rr46-m366-gm44
github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-002.md
github.com/PaddlePaddle/Paddle/commit/ed96baeed19b4e11b6cbc2dcc6776245ba5fab13
github.com/pypa/advisory-database/tree/main/vulns/paddlepaddle/PYSEC-2023-123.yaml
nvd.nist.gov/vuln/detail/CVE-2023-38670
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
21.3%