CVE-2023-38670

2023-07-2611:15:09

CWE-476

[email protected]

web.nvd.nist.gov

117

cve-2023-38670

null pointer dereference

paddle.flip

paddlepaddle

denial of service

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

21.2%

JSON

Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service.

Affected configurations

NVD

Node

paddlepaddlepaddlepaddleRange<2.5.0

CPENameOperatorVersion
paddlepaddle:paddlepaddlepaddlepaddlelt2.5.0

CPE	Name	Operator	Version
paddlepaddle:paddlepaddle	paddlepaddle	lt	2.5.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PaddlePaddle",
    "vendor": "PaddlePaddle",
    "versions": [
      {
        "lessThan": "2.5.0",
        "status": "affected",
        "version": "0",
        "versionType": "git"
      }
    ]
  }
]