Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch added for CVE-2022-25882.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the
    external_data field of the tensor proto can have a path to the file which is outside the model current
    directory or user-provided directory. The vulnerability occurs as a bypass for the patch added for
    CVE-2022-25882. (CVE-2024-27318)

The version of pytorch installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27318 advisory.

  - Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the     external_data field of the tensor proto can have a path to the file which is outside the model current     directory or user-provided directory. The vulnerability occurs as a bypass for the patch added for     CVE-2022-25882. (CVE-2024-27318)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of pytorch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27318 advisory.

  - Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the     external_data field of the tensor proto can have a path to the file which is outside the model current     directory or user-provided directory. The vulnerability occurs as a bypass for the patch added for     CVE-2022-25882. (CVE-2024-27318)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-abe1e34fdb advisory.

    Security fix for CVE-2024-27318 and CVE-2024-27319

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-270e3b5e9b advisory.

    Security fix for CVE-2024-27318 and CVE-2024-27319

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
421456	SCA: security update for onnx (GHSA-whh8-fjgc-qp73)	Tenable Cloud Security	SCA Checks	Local	high
421456	SCA: security update for onnx (GHSA-whh8-fjgc-qp73)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
215544	Azure Linux 3.0 Security Update: pytorch (CVE-2024-27318)	Nessus	Azure Linux Local Security Checks	Local	high
201796	CBL Mariner 2.0 Security Update: pytorch (CVE-2024-27318)	Nessus	MarinerOS Local Security Checks	Local	high
194600	Fedora 40 : onnx (2024-abe1e34fdb)	Nessus	Fedora Local Security Checks	Local	critical
192673	Fedora 39 : onnx (2024-270e3b5e9b)	Nessus	Fedora Local Security Checks	Local	critical

Detections

Analytics

CVE-2024-27318

high

Tenable Plugins

high

high

high

high

critical

critical