Lucene search

GoogleOSV:GHSA-JM68-FPMR-8J2G

HistoryJan 03, 2024 - 9:30 a.m.

PaddlePaddle floating point exception in paddle.linalg.matrix_rank

2024-01-0309:30:32

Google

osv.dev

paddlepaddle

matrix_rank

floating point exception

denial of service

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

17.0%

JSON

FPE in paddle.linalg.matrix_rank in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

CPENameOperatorVersion
paddlepaddleeq2.2.0
paddlepaddleeq2.5.2
paddlepaddleeq2.4.0rc0
paddlepaddleeq2.3.2
paddlepaddleeq2.5.0
paddlepaddleeq2.4.1
paddlepaddleeq2.3.0
paddlepaddleeq2.1.1
paddlepaddleeq2.4.2
paddlepaddleeq2.2.0rc0

Name	Operator	Version
paddlepaddle	eq	2.2.0
paddlepaddle	eq	2.5.2
paddlepaddle	eq	2.4.0rc0
paddlepaddle	eq	2.3.2
paddlepaddle	eq	2.5.0
paddlepaddle	eq	2.4.1
paddlepaddle	eq	2.3.0
paddlepaddle	eq	2.1.1
paddlepaddle	eq	2.4.2
paddlepaddle	eq	2.2.0rc0

Rows per page:

1-10 of 221

References

github.com/PaddlePaddle/Paddle

github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-007.md

github.com/PaddlePaddle/Paddle/commit/690ffe814dbfc5054d4e92df878687fd638fe3a5

nvd.nist.gov/vuln/detail/CVE-2023-38675

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

17.0%

JSON

Related for OSV:GHSA-JM68-FPMR-8J2G