CVE-2023-52307: Stack overflow in paddle.linalg.lu_unpack
Published Jan 3, 2024
·Updated
Stack overflow in paddle.linalg.luunpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.
Affected Software
2 affected componentsFixes available
pip/PaddlePaddle<2.6.0
2.6.0
PaddlePaddle paddlepaddle<2.6.0
Remediation
Event History
Jan 3, 2024
CVE Published
via MITRE·08:14 AM
Data Sourced
via MITRE·08:14 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-52307?
CVE-2023-52307 has a high severity level as it can lead to denial of service and potential further damage.
2
How do I fix CVE-2023-52307?
To fix CVE-2023-52307, upgrade PaddlePaddle to version 2.6.0 or later.
3
What component is affected by CVE-2023-52307?
CVE-2023-52307 affects the paddle.linalg.lu_unpack component in PaddlePaddle software.
4
Which versions of PaddlePaddle are vulnerable to CVE-2023-52307?
PaddlePaddle versions prior to 2.6.0 are vulnerable to CVE-2023-52307.
5
What could be the potential impact of CVE-2023-52307?
The potential impact of CVE-2023-52307 includes denial of service and instability of the software.