Lucene search
HistoryJul 26, 2023 - 10:15 a.m.
CVE-2023-38669
vulnerability
paddlepaddle
exploitable
use after free
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.002
Percentile
57.0%
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition.
Affected configurations
Node
paddlepaddlepaddlepaddleRange<2.5.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| paddlepaddle | paddlepaddle | * | cpe:2.3:a:paddlepaddle:paddlepaddle:*:*:*:*:*:*:*:* |
Related
osv
osv
PYSEC-2023-122
2023-07-26 10:15:00
CVE-2023-38669
2023-07-26 10:15:11
Use after free in PaddlePaddle
2023-07-26 12:30:28
cve
cve
CVE-2023-38669
2023-07-26 10:15:11
veracode
veracode
Use After Free
2023-07-27 05:16:41
github
github
Use after free in PaddlePaddle
2023-07-26 12:30:28
cvelist
cvelist
CVE-2023-38669
2023-07-26 09:29:39
prion
prion
Design/Logic Flaw
2023-07-26 10:15:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.002
Percentile
57.0%
Related for NVD:CVE-2023-38669