CVE-2023-52306: FPE in paddle.lerp
Published Jan 3, 2024
·Updated
FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
Affected Software
2 affected componentsFixes available
pip/PaddlePaddle<2.6.0
2.6.0
PaddlePaddle paddlepaddle<2.6.0
Remediation
Event History
Jan 3, 2024
CVE Published
08:13 AM
Data Sourced
08:13 AM
DescriptionSeverityWeakness
Advisory Published
09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-52306?
CVE-2023-52306 is classified as a denial of service vulnerability due to potential runtime crashes.
2
What software versions are affected by CVE-2023-52306?
CVE-2023-52306 affects PaddlePaddle versions prior to 2.6.0.
3
How do I fix CVE-2023-52306?
To fix CVE-2023-52306, upgrade PaddlePaddle to version 2.6.0 or later.
4
What type of vulnerability is CVE-2023-52306?
CVE-2023-52306 is a floating point exception (FPE) vulnerability.
5
Can CVE-2023-52306 lead to a service outage?
Yes, CVE-2023-52306 can cause a denial of service, potentially leading to service outages.