CVE-2023-38675: FPE in paddle.linalg.matrix_rank
Published Jan 3, 2024
·Updated
FPE in paddle.linalg.matrixrank in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
Affected Software
2 affected componentsFixes available
pip/PaddlePaddle<2.6.0
2.6.0
PaddlePaddle paddlepaddle<2.6.0
Remediation
Event History
Jan 3, 2024
CVE Published
08:10 AM
Data Sourced
08:10 AM
DescriptionSeverityWeakness
Advisory Published
via GitHub·09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-38675?
CVE-2023-38675 has a severity rating that indicates a potential for denial of service and runtime crashes.
2
How do I fix CVE-2023-38675?
To fix CVE-2023-38675, you should upgrade to PaddlePaddle version 2.6.0 or later.
3
Which versions of PaddlePaddle are affected by CVE-2023-38675?
All versions of PaddlePaddle prior to 2.6.0 are affected by CVE-2023-38675.
4
What impact does CVE-2023-38675 have on systems?
CVE-2023-38675 can cause runtime crashes leading to a denial of service on systems using affected versions of PaddlePaddle.
5
Is CVE-2023-38675 a coding flaw?
CVE-2023-38675 is a Floating Point Exception (FPE) in the paddle.linalg.matrix_rank function.