Apache Mxnet vulnerabilities

2 CVEs affecting Apache Mxnet, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-24294, published 2022-07-24.

More from Apache.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-1281, published 2018-06-08. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. The clustered setup of Apache MXNet allows users to specify which IP address and port the scheduler will listen on via the DMLC_PS_ROOT_URI and DMLC_PS_ROOT_PORT env variables. In versions older than…
• CVE-2022-24294, published 2022-07-24. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache…