CVE-2023-38671: Heap buffer overflow in paddle.trace
Published Jul 26, 2023
·Updated
Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.
Affected Software
2 affected componentsFixes available
pip/paddlepaddle>=0<2.5.0
2.5.0
PaddlePaddle paddlepaddle<2.5.0
Remediation
Event History
Jul 26, 2023
CVE Published
via MITRE·10:59 AM
Data Sourced
via MITRE·10:59 AM
DescriptionSeverityWeakness
Advisory Published
12:30 PM
Frequently Asked Questions
1
What is the severity of CVE-2023-38671?
The severity of CVE-2023-38671 is high due to the potential for denial of service and information disclosure.
2
How do I fix CVE-2023-38671?
To fix CVE-2023-38671, upgrade PaddlePaddle to version 2.5.0 or later.
3
What causes CVE-2023-38671?
CVE-2023-38671 is caused by a heap buffer overflow in the paddle.trace function of PaddlePaddle.
4
Which versions of PaddlePaddle are affected by CVE-2023-38671?
PaddlePaddle versions prior to 2.5.0 are affected by CVE-2023-38671.
5
What are the potential risks associated with CVE-2023-38671?
The potential risks associated with CVE-2023-38671 include denial of service and possible information disclosure.