Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dependency injection in NVCaffe
Vulnerability Description
NVCaffe's python required dependencies list used to contain `gfortran`version prior to 0.17.4, entry which does not exist in the repository pypi.org. An attacker could potentially have posted malicious files to pypi.org causing a user to install it within NVCaffe.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
对数据真实性的验证不充分
Vulnerability Title
Nvidia Caffe 数据伪造问题漏洞
Vulnerability Description
Nvidia Caffe是美国英伟达（Nvidia）公司的一个深度学习框架。 Nvidia Caffe 0.17.4之前版本存在数据伪造问题漏洞，攻击者可利用该漏洞向pypi.org发布恶意文件，导致用户在NVCaffe中安装该文件。
CVSS Information
N/A
Vulnerability Type
N/A