Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model SVM (introduced via pickle, json, or any other model permanence standard) with a large value in the _n_support array. NOTE: the scikit-learn vendor's position is that the behavior can only occur if the library's API is violated by an application that changes a private attribute.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Libsvm 安全漏洞
Vulnerability Description
Libsvm是Libsvm团队的一个用于SVM模式识别与回归的软件包。SVM用于模式识别或回归时，SVM方法及其参数、核函数及其参数的选择，也就是说最优SVM算法参数选择还只能是凭借经验、实验对比、大范围的搜寻或者利用软件包提供的交互检验功能进行寻优。 Libsvm v324 存在安全漏洞，该漏洞源于在svm.cpp中svm_predict_values，攻击者可利用该漏洞通过在n支持数组中使用一个经过精细加工的svm模型(通过pickle、json或任何其他模型永久标准引入)来导致拒绝服务(分割故障)。
CVSS Information
N/A
Vulnerability Type
N/A