PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

The version of pytorch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-31580 advisory.

  - PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component     /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via     a crafted input. (CVE-2024-31580)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component
    /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via
    a crafted input. (CVE-2024-31580)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component     /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via     a crafted input. (CVE-2024-31580)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
233547	CBL Mariner 2.0 Security Update: pytorch (CVE-2024-31580)	Nessus	MarinerOS Local Security Checks	Local	medium
421427	SCA: security update for torch (GHSA-5pcm-hx3q-hm94)	Tenable Cloud Security	SCA Checks	Local	high
421427	SCA: security update for torch (GHSA-5pcm-hx3q-hm94)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
228216	Linux Distros Unpatched Vulnerability : CVE-2024-31580	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2024-31580

high

Tenable Plugins

medium

high

high

medium