Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/06/28 12:0 a.m.21 views

SystemDS CPU exhaustion vulnerability

The Security Team noticed that the termination condition of the for loop in the readExternal method is a controllable variable, which, if tampered with, may lead to CPU exhaustion. As a fix, we added an upper bound and termination condition in the read and write logic. We classify it as a...

7.5CVSS1.3AI score0.02091EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder