netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-8fp7-jwv2-49x9
GHSA-g57v-2687-jx33
GHSA-j5h9-9r39-43q5
GHSA-rf7p-79xq-8xwm
GHSA-v9pg-qw6x-w5r2
This commit is contained in:
advisory-database[bot]
2024-01-03 21:58:21 +00:00
parent 4ae58cb632
commit 2f207fd0a0
5 changed files with 155 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/01/GHSA-8fp7-jwv2-49x9/GHSA-8fp7-jwv2-49x9.json → advisories/github-reviewed/2024/01/GHSA-8fp7-jwv2-49x9/GHSA-8fp7-jwv2-49x9.json
+31 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8fp7-jwv2-49x9",
"modified": "2024-01-03T09:30:33Z",
"modified": "2024-01-03T21:56:55Z",
"published": "2024-01-03T09:30:33Z",
"aliases": [
"CVE-2023-52309"
],
"summary": "PaddlePaddle heap buffer overflow in paddle.repeat_interleave",
"details": "Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.\n\n\n\n",
"severity": [
{
@@ -14,13 +15,39 @@
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "PaddlePaddle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.0"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52309"
},
{
"type": "WEB",
"url": "https://github.com/PaddlePaddle/Paddle/commit/19da5c0c4d8c5e4dfef2a92e24141c3f51884dcc"
},
{
"type": "PACKAGE",
"url": "https://github.com/PaddlePaddle/Paddle"
},
{
"type": "WEB",
"url": "https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-018.md"
@@ -31,8 +58,8 @@
"CWE-120"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-03T21:56:55Z",
"nvd_published_at": "2024-01-03T09:15:10Z"
}
}
advisories/unreviewed/2024/01/GHSA-g57v-2687-jx33/GHSA-g57v-2687-jx33.json → advisories/github-reviewed/2024/01/GHSA-g57v-2687-jx33/GHSA-g57v-2687-jx33.json
+31 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g57v-2687-jx33",
"modified": "2024-01-03T09:30:33Z",
"modified": "2024-01-03T21:56:15Z",
"published": "2024-01-03T09:30:33Z",
"aliases": [
"CVE-2023-52307"
],
"summary": "PaddlePaddle stack overflow in paddle.linalg.lu_unpack",
"details": "Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.\n\n\n\n",
"severity": [
{
@@ -14,13 +15,39 @@
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "PaddlePaddle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.0"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52307"
},
{
"type": "WEB",
"url": "https://github.com/PaddlePaddle/Paddle/commit/6fdb316c8b0eb747e5324907e352824c9dba8215"
},
{
"type": "PACKAGE",
"url": "https://github.com/PaddlePaddle/Paddle"
},
{
"type": "WEB",
"url": "https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-016.md"
@@ -31,8 +58,8 @@
"CWE-120"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-03T21:56:15Z",
"nvd_published_at": "2024-01-03T09:15:09Z"
}
}
advisories/unreviewed/2024/01/GHSA-j5h9-9r39-43q5/GHSA-j5h9-9r39-43q5.json → advisories/github-reviewed/2024/01/GHSA-j5h9-9r39-43q5/GHSA-j5h9-9r39-43q5.json
+31 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j5h9-9r39-43q5",
"modified": "2024-01-03T09:30:33Z",
"modified": "2024-01-03T21:57:38Z",
"published": "2024-01-03T09:30:33Z",
"aliases": [
"CVE-2023-52310"
],
"summary": "PaddlePaddle command injection in get_online_pass_interval",
"details": "PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the operating system.\n\n\n\n\n\n\n\n",
"severity": [
{
@@ -14,13 +15,39 @@
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "PaddlePaddle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.0"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52310"
},
{
"type": "WEB",
"url": "https://github.com/PaddlePaddle/Paddle/commit/49bec176053595975c1941cff9749c55f7203ea9"
},
{
"type": "PACKAGE",
"url": "https://github.com/PaddlePaddle/Paddle"
},
{
"type": "WEB",
"url": "https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-019.md"
@@ -31,8 +58,8 @@
"CWE-78"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-03T21:57:38Z",
"nvd_published_at": "2024-01-03T09:15:10Z"
}
}
advisories/unreviewed/2024/01/GHSA-rf7p-79xq-8xwm/GHSA-rf7p-79xq-8xwm.json → advisories/github-reviewed/2024/01/GHSA-rf7p-79xq-8xwm/GHSA-rf7p-79xq-8xwm.json
+31 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rf7p-79xq-8xwm",
"modified": "2024-01-03T09:30:33Z",
"modified": "2024-01-03T21:57:53Z",
"published": "2024-01-03T09:30:33Z",
"aliases": [
"CVE-2023-52311"
],
"summary": "PaddlePaddle command injection in _wget_download",
"details": "PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary commands on the operating system.\n\n\n\n\n\n\n\n",
"severity": [
{
@@ -14,13 +15,39 @@
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "PaddlePaddle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.0"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52311"
},
{
"type": "WEB",
"url": "https://github.com/PaddlePaddle/Paddle/commit/c5f6862d118d7d69210f0e73bea1b055f5f21f2b"
},
{
"type": "PACKAGE",
"url": "https://github.com/PaddlePaddle/Paddle"
},
{
"type": "WEB",
"url": "https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-020.md"
@@ -31,8 +58,8 @@
"CWE-78"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-03T21:57:53Z",
"nvd_published_at": "2024-01-03T09:15:10Z"
}
}
advisories/unreviewed/2024/01/GHSA-v9pg-qw6x-w5r2/GHSA-v9pg-qw6x-w5r2.json → advisories/github-reviewed/2024/01/GHSA-v9pg-qw6x-w5r2/GHSA-v9pg-qw6x-w5r2.json
+31 -4
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v9pg-qw6x-w5r2",
"modified": "2024-01-03T09:30:33Z",
"modified": "2024-01-03T21:56:29Z",
"published": "2024-01-03T09:30:33Z",
"aliases": [
"CVE-2023-52308"
],
"summary": "PaddlePaddle floating point exception in paddle.amin",
"details": "FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.\n\n\n\n",
"severity": [
{
@@ -14,13 +15,39 @@
}
],
"affected": [
{
"package": {
"ecosystem": "PyPI",
"name": "PaddlePaddle"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.0"
}
]
}
]
}
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52308"
},
{
"type": "WEB",
"url": "https://github.com/PaddlePaddle/Paddle/commit/19da5c0c4d8c5e4dfef2a92e24141c3f51884dcc"
},
{
"type": "PACKAGE",
"url": "https://github.com/PaddlePaddle/Paddle"
},
{
"type": "WEB",
"url": "https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2023-017.md"
@@ -31,8 +58,8 @@
"CWE-369"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-01-03T21:56:29Z",
"nvd_published_at": "2024-01-03T09:15:10Z"
}
}