CVE-2020-28975

Publicada em 21 nov 2020 · Atualizada em 04 ago 2024

Seguir esta CVE + Monitorar scikit-learn

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.6%

svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model SVM (introduced via pickle, json, or any other model permanence standard) with a large value in the _n_support array. NOTE: the scikit-learn vendor's position is that the behavior can only occur if the library's API is violated by an application that changes a private attribute.

Produtos afetados

n/a · n/a

Referências

http://packetstormsecurity.com/files/160281/SciKit-Learn-0.23.2-Denial-Of-Service.html http://seclists.org/fulldisclosure/2020/Nov/44 https://github.com/cjlin1/libsvm/blob/9a3a9708926dec87d382c43b203f2ca19c2d56a0/svm.cpp#L2501 https://github.com/scikit-learn/scikit-learn/commit/1bf13d567d3cd74854aa8343fd25b61dd768bb85 https://github.com/scikit-learn/scikit-learn/issues/18891 https://security.gentoo.org/glsa/202301-03