Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2024-48063

UNKNOWN
Published 2024-10-29T00:00:00
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2024-48063. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed computing.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

pytorch

pytorch

Affected Versions:

0

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed CRITICAL

GHSA-9v5x-r4g7-gqw3

Advisory Details

In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE.

CVSS Scoring

CVSS Score

9.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-48063
WEB https://github.com/pytorch/pytorch/issues/129228
WEB https://gist.github.com/hexian2001/c046c066895a963ecc0a2cf9e1180065
WEB https://github.com/pytorch/pytorch/security/policy#using-distributed-features
WEB https://rumbling-slice-eb0.notion.site/Distributed-RPC-Framework-RemoteModule-has-Deserialization-RCE-in-pytorch-pytorch-111e3cda9e8c8021a7d3cbc61ee1a20c

Advisory provided by GitHub Security Advisory Database. Published: October 29, 2024, Modified: November 1, 2024

References

https://rumbling-slice-eb0.notion.site/Distributed-RPC-Framework-RemoteModule-has-Deserialization-RCE-in-pytorch-pytorch-111e3cda9e8c8021a7d3cbc61ee1a20c
https://gist.github.com/hexian2001/c046c066895a963ecc0a2cf9e1180065
https://github.com/pytorch/pytorch/issues/129228
https://github.com/pytorch/pytorch/security/policy#using-distributed-features
Published: 2024-10-29T00:00:00
Last Modified: 2025-01-09T17:22:47.091Z
Copied to clipboard!