confirmed
paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.
Published Updated
PatchFirst · Latest vulnerabilities
paddlepaddle 2.5.2: known vulnerabilities
Known vulnerabilities affecting paddlepaddle 2.5.2: 24. Compare the fixes below with your installed release.
Vulnerabilities: 24
CVE-2024-0818
Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6
Published UpdatedCVE-2024-0917
remote code execution in paddlepaddle/paddle 2.6.0
Published UpdatedCVE-2024-0815
Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0
- Update to 3.0.0-beta0
Published UpdatedCVE-2024-0817
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0
- Update to 3.0.0-beta0
Published UpdatedCode Injection in paddlepaddle/paddle
Code Injection in paddlepaddle/paddle
- Update to 2.6.0
Published UpdatedCommand injection in convert_shape_compare
PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted in the ability to execute arbitrary commands on the operating system.
- Update to 2.6.0
Published UpdatedFPE in paddle.argmin and paddle.argmax
FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
- Update to 2.6.0
Published UpdatedNull pointer dereference in paddle.crop
Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
- Update to 2.6.0
- Update to 2.6.1
Published UpdatedCommand injection in _wget_download
PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary commands on the operating system.
- Update to 2.6.0
Published UpdatedCommand injection in get_online_pass_interval
PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the operating system.
- Update to 2.6.0
Published UpdatedHeap buffer overflow in paddle.repeat_interleave
Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.
- Update to 2.6.0
Published UpdatedFPE in paddle.amin
FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
- Update to 2.6.0
Published UpdatedStack overflow in paddle.linalg.lu_unpack
Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.
- Update to 2.6.0
Published UpdatedFPE in paddle.lerp
FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
- Update to 2.6.0
Published UpdatedFPE in paddle.topk
FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
- Update to 2.6.0
Published UpdatedStack overflow in paddle.searchsorted
Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.
- Update to 2.6.0
Published UpdatedSegfault in paddle.put_along_axis
Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
- Update to 2.6.0
Published UpdatedSegfault in paddle.nextafter
Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
- Update to 2.6.0
Published UpdatedSegfault in paddle.mode
OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
- Update to 2.6.0
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.