drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Denial of Service in scikit-learn
Name: |
Denial of Service in scikit-learn |
|
ID: |
202301-03 |
|
Distribution: |
Gentoo |
|
Plattformen: |
Keine Angabe |
|
Datum: |
Mi, 11. Januar 2023, 06:54 |
|
Referenzen: |
https://nvd.nist.gov/vuln/detail/CVE-2020-28975 |
|
Applikationen: |
scikit-learn |
|
Originalnachricht |
--===============0258117005710279030== Content-Type: text/plain; charset="utf-8"
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202301-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Severity: Low Title: scikit-learn: Denial of Service Date: January 11, 2023 Bugs: #758323 ID: 202301-03
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Synopsis ========
A vulnerability was found in scikit-learn which could result in denial of service.
Background ==========
scikit-learn is a machine learning library for Python.
Affected packages =================
------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sci-libs/scikit-learn < 1.1.1 >= 1.1.1
Description ===========
When supplied with a crafted model SVM, predict() can result in a null pointer dereference.
Impact ======
An attcker capable of providing a crafted model to scikit-learn can result in denial of service.
Workaround ==========
There is no known workaround at this time.
Resolution ==========
All scikit-learn users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sci-libs/scikit-learn-1.1.1"
References ==========
[ 1 ] CVE-2020-28975 https://nvd.nist.gov/vuln/detail/CVE-2020-28975
Availability ============
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
https://security.gentoo.org/glsa/202301-03
Concerns? =========
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License =======
Copyright 2023 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
https://creativecommons.org/licenses/by-sa/2.5 --===============0258117005710279030== Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEpqTA6ABLMxh/aChGFMQkOaVy+9kFAmO+RjUACgkQFMQkOaVy +9lqyhAApgAnwfcYQMFWB9RMYEsfKpfqWgES9mu4yNaRQV0Z1x1quqOJOdz1+ORZ EkYwmlqR78Tcyl7Cm21u9GgHpQgVnwaWHYX63VL+nYNPMGwOltrFCYgNMXJNa/2H 5b8GzJA4OQKlsBpWMgJn8FfLQcnAuBk0bRLAHwluQev+4ELQjhS6A7leI8hdtpqb /HJ/O12sjHpr+5L+1N+2XZm9wc5CWhLX3DE/Q7BFj9sOycMf7b7Azvepdaw9oj3G McHVr6wXe6rwFGvGop7qX3CMvUh/RQCs5u3TDI6AU9mgtQ6BrmqvBerTRwIWyDLU MrQ6xnHCaqxzajYPOqbWEy17CLOGSw2uUwlUEwDjrBkrqKbfxYqItuGyOuru1B4R GJTmRT5v3KFL477sGLFkdxRoS3p9mQZK1EpIi7A/mUUtRfX+Q9B2yRrSgWS2LPL+ BXLCuXrKQ66MQjet6WRft1mMbvRSmYEuhfxMLk44zWervha4v8VXjSzGTxTa9sJ8 bQ9rlfFI/KyqjOuAnCgRmgmADNmZ9Un951RifZIn/EI2UhM1VnJvlyth8H7FKG+D BLv6lrGhXE57TUs6FMEgmEBps06xI13Hp0ByEkq6YdZEhYglorkFMARF5QCxKVX+ o9Qq/IpIu+MCSoz2snlg4QixIFyVbpTekbVieD4qnyQ7kW5rmlE= =b4HG -----END PGP SIGNATURE-----
--===============0258117005710279030==--
|
|
|
|