CVE-2023-38670 Null pointer dereference in paddle.flip

2023-07-2610:50:12

CWE-476

Baidu

www.cve.org

null pointer

paddle.flip

paddlepaddle

2.5.0

runtime crash

denial of service

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

EPSS

0.001

Percentile

32.5%

JSON

Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PaddlePaddle",
    "vendor": "PaddlePaddle",
    "versions": [
      {
        "lessThan": "2.5.0",
        "status": "affected",
        "version": "0",
        "versionType": "git"
      }
    ]
  }
]