Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-34997

Опубликовано: 17 мая 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.5

Описание

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

РелизСтатусПримечание
devel

not-affected

disputed
esm-apps-legacy/xenial

not-affected

disputed
esm-apps/bionic

not-affected

disputed
esm-apps/focal

not-affected

disputed
esm-apps/jammy

not-affected

disputed
esm-apps/noble

not-affected

disputed
esm-apps/xenial

not-affected

disputed
esm-infra-legacy/trusty

not-affected

disputed
focal

not-affected

disputed
jammy

not-affected

disputed

Показывать по

EPSS

Процентиль: 50%
0.00669
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
redhat
больше 2 лет назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

CVSS3: 7.5
nvd
больше 2 лет назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.

CVSS3: 7.5
debian
больше 2 лет назад

joblib v1.4.2 was discovered to contain a deserialization vulnerabilit ...

github
больше 2 лет назад

joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array().

EPSS

Процентиль: 50%
0.00669
Низкий

7.5 High

CVSS3