CVE-2023-38678: Segfault in paddle.mode
Published Jan 3, 2024
·Updated
OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
Affected Software
2 affected componentsFixes available
pip/PaddlePaddle<2.6.0
2.6.0
PaddlePaddle paddlepaddle<2.6.0
Remediation
Event History
Jan 3, 2024
CVE Published
08:11 AM
Data Sourced
08:11 AM
DescriptionSeverityWeakness
Advisory Published
09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-38678?
CVE-2023-38678 is assessed as causing a runtime crash and denial of service.
2
How do I fix CVE-2023-38678?
To fix CVE-2023-38678, upgrade PaddlePaddle to version 2.6.0 or later.
3
What software is affected by CVE-2023-38678?
CVE-2023-38678 affects PaddlePaddle versions prior to 2.6.0.
4
Can CVE-2023-38678 be exploited remotely?
Yes, an attacker can exploit CVE-2023-38678 to cause a denial of service.
5
What is the impact of CVE-2023-38678 on my applications?
The impact of CVE-2023-38678 can result in application crashes and service interruptions.