Lucene search
GoogleOSV:CVE-2024-27319HistoryFeb 23, 2024 - 6:15 p.m.
CVE-2024-27319
2024-02-2318:15:50
Google
osv.dev
3
package
vulnerable
out-of-bounds read
onnx_assert
onnx_assertm
string copy
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
4.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.5%
Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.
Related
cbl_mariner
cbl_mariner
CVE-2024-27319 affecting package pytorch for versions less than 2.0.0-4
2024-04-30 01:31:53
nessus
nessus
CBL Mariner 2.0 Security Update: pytorch (CVE-2024-27319)
2024-07-03 00:00:00
Fedora 39 : onnx (2024-270e3b5e9b)
2024-03-28 00:00:00
Fedora 40 : onnx (2024-abe1e34fdb)
2024-04-29 00:00:00
veracode
veracode
Out-of-bounds Read
2024-02-26 07:51:31
osv
osv
Onnx Out-of-bounds Read vulnerability
2024-02-23 18:30:59
github
github
Onnx Out-of-bounds Read vulnerability
2024-02-23 18:30:59
cvelist
cvelist
CVE-2024-27319
2024-02-23 17:39:52
cve
cve
CVE-2024-27319
2024-02-23 18:15:50
prion
prion
Out-of-bounds
2024-02-23 18:15:00
nvd
nvd
CVE-2024-27319
2024-02-23 18:15:50
vulnrichment
vulnrichment
CVE-2024-27319
2024-02-23 17:39:52
openvas
openvas
Fedora: Security Advisory for onnx (FEDORA-2024-abe1e34fdb)
2024-03-29 00:00:00
Fedora: Security Advisory for onnx (FEDORA-2024-270e3b5e9b)
2024-03-29 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: onnx-1.14.0-9.fc39
2024-03-29 01:11:37
[SECURITY] Fedora 40 Update: onnx-1.14.1-2.fc40
2024-03-29 00:20:54
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
4.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.5%
Related for OSV:CVE-2024-27319