CVE-2024-36730

Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting negative values into the oneflow.zeros/ones parameter.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:oneflow:oneflow:0.9.1:*:*:*:*:*:*:*

History

15 Oct 2024, 19:25

Type Values Removed Values Added
CPE cpe:2.3:a:oneflow:oneflow:0.9.1:*:*:*:*:*:*:*
First Time Oneflow
Oneflow oneflow
References () https://gist.github.com/Redmept1on/1c530e191fb3c76f034c2ea1d11eb821 - () https://gist.github.com/Redmept1on/1c530e191fb3c76f034c2ea1d11eb821 - Third Party Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CWE CWE-755

07 Jun 2024, 14:56

Type Values Removed Values Added
Summary
  • (es) Validación de entrada incorrecta en OneFlow-Inc. Oneflow v0.9.1 permite a los atacantes provocar una denegación de servicio (DoS) ingresando valores negativos en el parámetro oneflow.zeros/ones.

06 Jun 2024, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-06 19:15

Updated : 2024-10-15 19:25


NVD link : CVE-2024-36730

Mitre link : CVE-2024-36730

CVE.ORG link : CVE-2024-36730


JSON object : View

Products Affected

oneflow

  • oneflow
CWE
CWE-755

Improper Handling of Exceptional Conditions