CVE-2023-38672: FPE in paddle.linalg.matrix_power
Published Jul 26, 2023
·Updated
FPE in paddle.linalg.matrixpower in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service.
Other sources
FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service.
— MITRE
Affected Software
2 affected componentsFixes available
pip/paddlepaddle>=0<2.5.0
2.5.0
PaddlePaddle paddlepaddle<2.5.0
Remediation
Event History
Jul 26, 2023
CVE Published
via MITRE·11:04 AM
Data Sourced
via MITRE·11:04 AM
DescriptionSeverityWeakness
Advisory Published
12:30 PM
Frequently Asked Questions
1
What is CVE-2023-38672?
CVE-2023-38672 is a vulnerability in PaddlePaddle before version 2.5.0 that can cause a runtime crash and a denial of service.
2
How does CVE-2023-38672 affect PaddlePaddle?
CVE-2023-38672 affects PaddlePaddle before version 2.5.0 and can cause a runtime crash and a denial of service.
3
What is the severity of CVE-2023-38672?
CVE-2023-38672 has a severity rating of high, with a CVSS score of 7.5.
4
What is the Common Weakness Enumeration (CWE) of CVE-2023-38672?
CVE-2023-38672 is associated with CWE-369 (Divide By Zero).
5
How can I fix CVE-2023-38672?
To fix CVE-2023-38672, upgrade PaddlePaddle to version 2.5.0 or higher.