yun2025 发表于 前天 17:08

湖南永州千年文脉焕新光彩 “两个融合”构筑文旅新图景

湖南永州千年文脉焕新光彩 “两个融合”构筑文旅新图景

TorchServe:模型解包目录可预测导致本地提权风险

11月7日公开的漏洞记录CVE-2026-123974涉及TorchServe。模型服务把归档展开到临时目录,并在随后运行其中的处理程序。如果目录位置可预先知道,同一主机上的本地用户就可能替换处理文件,让操作以模型服务账户的身份执行。问题出现在部署模型和加载程序的交界处,公告标注为影响全部版本。版本清单标出的受影响范围包括*之前的版本。

这条记录给出的CVSS 3.1基础评分为7.8分,分级为高危。按照评分列出的条件,利用者需要具备本地访问条件,需要已有低权限账户或相当的访问权,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、高。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/34c5db9b0a0a754ca55532bf3cb7a95e
https://lightroom.adobe.com/shares/6575f93883b7d74fb6b18345ed304d28
https://lightroom.adobe.com/shares/8f544f45e04a4349b6d72878c6590f34
https://lightroom.adobe.com/shares/17614f4a54069a4abc705276579a527d
https://lightroom.adobe.com/shares/be765bcc5f83a24198517ec9d9f3cd94
https://lightroom.adobe.com/shares/b367df175dadff4d86ea41a9ac9c0ddb
https://lightroom.adobe.com/shares/eedaedc5fd14614cbd08e9b8511b574c
https://lightroom.adobe.com/shares/ea207415ee310d4f93c6f22b65218ca1
https://lightroom.adobe.com/shares/4b156c6039b99c46a21c5e17aa42edc4
https://lightroom.adobe.com/shares/882d322ad57e034c955008ffeab5c40c
https://lightroom.adobe.com/shares/52413588c37f314f928b9942f34a8882
https://lightroom.adobe.com/shares/f9e049eb5de0a549b3a6a36ce1d0ee29
https://lightroom.adobe.com/shares/2d413e881bb658479842d390e649d5f3
https://lightroom.adobe.com/shares/574d9de75b9a44409b8ff9cc33b95db0
https://lightroom.adobe.com/shares/51dd2f5a92cff14fb2593da543092162
https://lightroom.adobe.com/shares/1fe7c1b7bf88e64d9141bc101e2649bf
https://lightroom.adobe.com/shares/d9f8f5b5a760e544982ddee7981ad695
https://lightroom.adobe.com/shares/2343635519412748a0d3f75ab5dbf6f0
https://lightroom.adobe.com/shares/2feab7657375ea409f61edc80924ef8f
https://lightroom.adobe.com/shares/fa8baaece855d64cbe56f142f6ecc7fb
https://lightroom.adobe.com/shares/66396371b24a9947a21821d888340b5e
https://lightroom.adobe.com/shares/6fe4520618aa6748a17728e311d5f7bd
https://lightroom.adobe.com/shares/5eafd45fba9ef4498bf06e073d0b50b6
https://lightroom.adobe.com/shares/c8afc9be32edf2459c2b8e1759751c04
https://lightroom.adobe.com/shares/58eff3f0c8f355459f1b7b5e28c4e48f
https://lightroom.adobe.com/shares/442cdfa3a9233b4d885fdd77e740f508
https://lightroom.adobe.com/shares/04e1402003060149b0288d7c3813a693
https://lightroom.adobe.com/shares/81ee67721e9f744f88ca65884b33c6c8
https://lightroom.adobe.com/shares/9152ad722cb56d49928e17db044eae34
https://lightroom.adobe.com/shares/04d48793a22c9341ae217f5634d3cc25
https://lightroom.adobe.com/shares/90de31e45c6d684798de72c71c6e0b3d
https://lightroom.adobe.com/shares/47db92c5e3f39e4c9f8767f932179ca4
https://lightroom.adobe.com/shares/9762eba055f1e84cbb0c450abe68b029
https://lightroom.adobe.com/shares/8f26027b5e5e754394b78887901351ab
https://lightroom.adobe.com/shares/b0f998957605754f93569de8a4759da6
https://lightroom.adobe.com/shares/360c3e7f5b934243a8d8c1f5fa3ba2a8
https://lightroom.adobe.com/shares/8a4179a0c878d14698d2680ec9fa28fb
https://lightroom.adobe.com/shares/ccd180c8a810ec47a74db9dc865f5d73
https://lightroom.adobe.com/shares/6ece538d40a97f40a16a14626c8ac5a8
https://lightroom.adobe.com/shares/0922f5a7ee1af344aafcedce8ee14531
https://lightroom.adobe.com/shares/6b12bbc355fd444a85c254f91f88b2b3
https://lightroom.adobe.com/shares/9070d724dcd4ae45ae8bc1ae8cfbbf8a
https://lightroom.adobe.com/shares/295eada4b6cdcb499a403afe76ff863a
https://lightroom.adobe.com/shares/582ce28187130f479c769a5a15176fb1
https://lightroom.adobe.com/shares/195c36c4045ebc4a871e3d33223e1a12
https://lightroom.adobe.com/shares/c51a6de16421a0429cf2ef786c847481
https://lightroom.adobe.com/shares/6a45f5ec5ff5fb4f88b372997741ce15
https://lightroom.adobe.com/shares/791594aa17184b489615bf68bd018b05
https://lightroom.adobe.com/shares/7f2ab3d4302d3b478e4a80a285d47aed
https://lightroom.adobe.com/shares/0229d2a828c8494b889dbf0d7a36332c

达瑞安 发表于 前天 17:17

沙发!沙发!
页: [1]
查看完整版本: 湖南永州千年文脉焕新光彩 “两个融合”构筑文旅新图景