CVE-2023-52304: Stack overflow in paddle.searchsorted
Published Jan 3, 2024
·Updated
Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.
Affected Software
2 affected componentsFixes available
pip/PaddlePaddle<2.6.0
2.6.0
PaddlePaddle paddlepaddle<2.6.0
Remediation
Event History
Jan 3, 2024
CVE Published
08:13 AM
Data Sourced
08:13 AM
DescriptionSeverityWeakness
Advisory Published
09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-52304?
CVE-2023-52304 has a critical severity due to potential denial of service and further damage.
2
How do I fix CVE-2023-52304?
To fix CVE-2023-52304, upgrade PaddlePaddle to version 2.6.0 or later.
3
Which versions of PaddlePaddle are affected by CVE-2023-52304?
CVE-2023-52304 affects all versions of PaddlePaddle prior to 2.6.0.
4
What type of vulnerability is CVE-2023-52304?
CVE-2023-52304 is a stack overflow vulnerability in the paddle.searchsorted function.
5
What are the potential impacts of CVE-2023-52304?
The potential impacts of CVE-2023-52304 include denial of service and further exploitation due to stack overflow.