CVE-2024-35199

TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. In affected versions the two gRPC ports 7070 and 7071, are not bound to [localhost](http://localhost/) by default, so when TorchServe is launched, these two interfaces are bound to all interfaces. Customers using PyTorch inference Deep Learning Containers (DLC) through Amazon SageMaker and EKS are not affected. This issue in TorchServe has been fixed in PR #3083. TorchServe release 0.11.0 includes the fix to address this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS v3 4.7 MEDIUM

4.7^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://github.com/pytorch/serve/pull/3083
https://github.com/pytorch/serve/releases/tag/v0.11.0
https://github.com/pytorch/serve/security/advisories/GHSA-hhpg-v63p-wp7w

Configurations

No configuration.

History

No history.

Information

Published : 2024-07-19 02:15

Updated : 2024-07-19 13:01

NVD link : CVE-2024-35199

Mitre link : CVE-2024-35199

CVE.ORG link : CVE-2024-35199

JSON object : View

Products Affected

No product.

CWE

CWE-668

Exposure of Resource to Wrong Sphere

{"id": "CVE-2024-35199", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2024-07-19T02:15:14.777", "references": [{"url": "https://github.com/pytorch/serve/pull/3083", "source": "security-advisories@github.com"}, {"url": "https://github.com/pytorch/serve/releases/tag/v0.11.0", "source": "security-advisories@github.com"}, {"url": "https://github.com/pytorch/serve/security/advisories/GHSA-hhpg-v63p-wp7w", "source": "security-advisories@github.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-668"}]}], "descriptions": [{"lang": "en", "value": "TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. In affected versions the two gRPC ports 7070 and 7071, are not bound to [localhost](http://localhost/) by default, so when TorchServe is launched, these two interfaces are bound to all interfaces. Customers using PyTorch inference Deep Learning Containers (DLC) through Amazon SageMaker and EKS are not affected. This issue in TorchServe has been fixed in PR #3083. TorchServe release 0.11.0 includes the fix to address this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability."}, {"lang": "es", "value": "TorchServe es una herramienta flexible y f\u00e1cil de usar para servir y escalar modelos PyTorch en producci\u00f3n. En las versiones afectadas, los dos puertos gRPC 7070 y 7071 no est\u00e1n vinculados a [localhost](http://localhost/) de forma predeterminada, por lo que cuando se inicia TorchServe, estas dos interfaces est\u00e1n vinculadas a todas las interfaces. Los clientes que utilizan contenedores de aprendizaje profundo (DLC) de inferencia de PyTorch a trav\u00e9s de Amazon SageMaker y EKS no se ven afectados. Este problema en TorchServe se solucion\u00f3 en PR #3083. La versi\u00f3n 0.11.0 de TorchServe incluye la soluci\u00f3n para abordar esta vulnerabilidad. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad."}], "lastModified": "2024-07-19T13:01:44.567", "sourceIdentifier": "security-advisories@github.com"}