Описание
NVCaffe's python required dependencies list used to contain gfortranversion prior to 0.17.4, entry which does not exist in the repository pypi.org. An attacker could potentially have posted malicious files to pypi.org causing a user to install it within NVCaffe.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.17.4 (исключая)
cpe:2.3:a:nvidia:nvcaffe:*:*:*:*:*:*:*:*
EPSS
Процентиль: 34%
0.00141
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-345
EPSS
Процентиль: 34%
0.00141
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-345