CVE-2024-0917: confirmed
Published Mar 7, 2024
·Updated
remote code execution in paddlepaddle/paddle 2.6.0
Affected Software
2 affected components
pip/paddlepaddle<=2.6.0
PaddlePaddle paddlepaddle=2.6.0
Event History
Mar 7, 2024
CVE Published
via MITRE·08:24 AM
Data Sourced
via MITRE·08:24 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Advisory Published
via GitHub·09:30 AM
Jan 11, 57022
Event
via NVD·12:07 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-0917?
CVE-2024-0917 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2024-0917?
To mitigate CVE-2024-0917, update paddlepaddle to a version higher than 2.6.0.
3
What systems are affected by CVE-2024-0917?
CVE-2024-0917 affects paddlepaddle version 2.6.0 installed via pip.
4
What type of vulnerability is CVE-2024-0917?
CVE-2024-0917 is a remote code execution vulnerability.
5
Who is responsible for reporting CVE-2024-0917?
CVE-2024-0917 was reported by security researchers who discovered the vulnerability in the paddlepaddle library.