CVE-2023-38676: Segfault in paddle.dot
Published Jan 3, 2024
·Updated
Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
Affected Software
2 affected componentsFixes available
pip/PaddlePaddle<2.6.0
2.6.0
PaddlePaddle paddlepaddle<2.6.0
Remediation
Event History
Jan 3, 2024
CVE Published
08:11 AM
Data Sourced
08:11 AM
DescriptionSeverityWeakness
Advisory Published
09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-38676?
CVE-2023-38676 has a severity that can lead to a runtime crash and denial of service.
2
How do I fix CVE-2023-38676?
You can fix CVE-2023-38676 by upgrading PaddlePaddle to version 2.6.0 or later.
3
Which versions of PaddlePaddle are affected by CVE-2023-38676?
CVE-2023-38676 affects all versions of PaddlePaddle prior to 2.6.0.
4
What potential impact does CVE-2023-38676 have on my system?
The impact of CVE-2023-38676 can result in system crashes and denial of service for applications using affected versions of PaddlePaddle.
5
Is CVE-2023-38676 a remote code execution vulnerability?
CVE-2023-38676 is not categorized as a remote code execution vulnerability but rather a denial of service caused by a runtime crash.