Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-24294

ReDoS in Apache MXNet RTC Module

Description

A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to use excessive resources to attempt a match. This issue affects Apache MXNet versions prior to 1.9.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache MXNet

  • unspecified to < 1.9.1affected

References