Lucene search

GoogleOSV:GHSA-275C-W5MQ-V5M2

HistoryJan 03, 2024 - 9:30 a.m.

PaddlePaddle floating point exception in paddle.argmin and paddle.argmax

2024-01-0309:30:33

Google

osv.dev

paddlepaddle

floating point exception

argmin

argmax

denial of service

software

runtime crash

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

17.1%

JSON

FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

CPENameOperatorVersion
paddlepaddleeq2.2.0
paddlepaddleeq2.5.2
paddlepaddleeq2.4.0rc0
paddlepaddleeq2.3.2
paddlepaddleeq2.5.0
paddlepaddleeq2.4.1
paddlepaddleeq2.3.0
paddlepaddleeq2.1.1
paddlepaddleeq2.4.2
paddlepaddleeq2.2.0rc0

Name	Operator	Version
paddlepaddle	eq	2.2.0
paddlepaddle	eq	2.5.2
paddlepaddle	eq	2.4.0rc0
paddlepaddle	eq	2.3.2
paddlepaddle	eq	2.5.0
paddlepaddle	eq	2.4.1
paddlepaddle	eq	2.3.0
paddlepaddle	eq	2.1.1
paddlepaddle	eq	2.4.2
paddlepaddle	eq	2.2.0rc0

Rows per page:

1-10 of 221

References

github.com/PaddlePaddle/Paddle

github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-022.md

github.com/PaddlePaddle/Paddle/commit/6ef71779197ad6faf51ac295022ab5008d81372f

nvd.nist.gov/vuln/detail/CVE-2023-52313

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

17.1%

JSON

Related for OSV:GHSA-275C-W5MQ-V5M2