CVE-2023-52303: Segfault in paddle.put_along_axis
Published Jan 3, 2024
·Updated
Nullptr in paddle.putalongaxis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
Affected Software
2 affected componentsFixes available
pip/paddlepaddle<2.6.0
2.6.0
PaddlePaddle paddlepaddle<2.6.0
Remediation
Event History
Jan 3, 2024
CVE Published
08:12 AM
Data Sourced
08:12 AM
DescriptionSeverityWeakness
Advisory Published
09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-52303?
CVE-2023-52303 is classified as a denial of service vulnerability due to the potential for runtime crashes.
2
How do I fix CVE-2023-52303?
To fix CVE-2023-52303, upgrade PaddlePaddle to version 2.6.0 or later.
3
What components are affected by CVE-2023-52303?
CVE-2023-52303 affects PaddlePaddle versions before 2.6.0 across all supported platforms.
4
What causes the vulnerability CVE-2023-52303?
CVE-2023-52303 is caused by a null pointer dereference in the paddle.put_along_axis function.
5
Can CVE-2023-52303 be exploited remotely?
Yes, CVE-2023-52303 can potentially be exploited remotely, leading to a denial of service.