CVE-2024-0817: confirmed
Published Mar 7, 2024
·Updated
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0
Affected Software
2 affected components
pip/paddlepaddle<=2.6.0
PaddlePaddle paddlepaddle=2.6.0
Event History
Mar 7, 2024
CVE Published
via MITRE·01:15 AM
Data Sourced
via MITRE·01:15 AM
DescriptionSeverityWeakness
Advisory Published
via GitHub·03:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-0817?
CVE-2024-0817 has been classified as a critical vulnerability due to its potential for command injection.
2
How do I fix CVE-2024-0817?
To remediate CVE-2024-0817, upgrade PaddlePaddle to version 2.6.1 or later.
3
What software is affected by CVE-2024-0817?
CVE-2024-0817 affects PaddlePaddle version 2.6.0.
4
What type of vulnerability is CVE-2024-0817?
CVE-2024-0817 is a command injection vulnerability found in the IrGraph.draw function.
5
What are the potential impacts of CVE-2024-0817?
Exploitation of CVE-2024-0817 may allow an attacker to execute arbitrary commands on the server.