assign cve number to pdsa, test=document_fix (PaddlePaddle#48846)

lxsbupt · Dec 7, 2022 · 683e69b · 683e69b
1 parent 34f5bf5
commit 683e69b
Show file tree

Hide file tree

Showing 4 changed files with 16 additions and 0 deletions.
diff --git a/security/advisory/pdsa-2022-001.md b/security/advisory/pdsa-2022-001.md
@@ -1,5 +1,9 @@
 ## PDSA-2022-001: OOB read in gather_tree
 
+### CVE Number
+
+CVE-2022-46741
+
 ### Impact
 
 The PoC is as follows:

diff --git a/security/advisory/pdsa-2022-001_cn.md b/security/advisory/pdsa-2022-001_cn.md
@@ -1,5 +1,9 @@
 ## PDSA-2022-001: OOB read in gather_tree
 
+### CVE编号
+
+CVE-2022-46741
+
 ### 影响
 
 PoC如下：

diff --git a/security/advisory/pdsa-2022-002.md b/security/advisory/pdsa-2022-002.md
@@ -1,5 +1,9 @@
 ## PDSA-2022-002: Code injection in paddle.audio.functional.get_window
 
+### CVE Number
+
+CVE-2022-46742
+
 ### Impact
 
 `paddle.audio.functional.get_windowis` vulnerable to a code injection as it calls `eval` on user supplied `winstr`. This may lead to arbitrary code execution.

diff --git a/security/advisory/pdsa-2022-002_cn.md b/security/advisory/pdsa-2022-002_cn.md
@@ -1,5 +1,9 @@
 ## PDSA-2022-002: Code injection in paddle.audio.functional.get_window
 
+### CVE编号
+
+CVE-2022-46742
+
 ### 影响
 
 `paddle.audio.functional.get_window`由于使用`eval`用户提供的参数`winstr`而存在代码注入漏洞，将导致任意代码执行。