{"id":"CVE-2022-24294","aliases":["BIT-mxnet-2022-24294","EUVD-2022-6456","GHSA-xxj3-55p6-xg3h","PYSEC-2026-850"],"status":"published","title":"ReDoS in Apache MXNet RTC Module","description":"A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to use excessive resources to attempt a match. This issue affects Apache MXNet versions prior to 1.9.1.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01882,"percentile":0.79626,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2022-07-24T17:45:12Z","modified":"2026-10-28T02:31:06Z","fixes":[{"ecosystem":"PyPI","package":"mxnet","fixed_in":["1.9.1"],"sources":["ghsa","osv"]},{"ecosystem":"Bitnami","package":"mxnet","fixed_in":["1.9.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"mxnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"mxnet","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.9.1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"mxnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1"}]}],"versions":["0.10.0","0.10.0.post2","0.11.0","0.12.0","0.12.1","0.9.5","0.9.5.post1","0.9.5.post2","1.0.0","1.0.0.post0","1.0.0.post1","1.0.0.post2","1.0.0.post3","1.0.0.post4","1.1.0","1.1.0.post0","1.2.0","1.2.1","1.2.1.post0","1.2.1.post1","1.3.0","1.3.0.post0","1.3.1","1.4.0","1.4.0.post0","1.4.1","1.5.0","1.5.1","1.5.1.post0","1.6.0","1.7.0.post1","1.7.0.post2","1.8.0","1.8.0.post0","1.9.0"]},{"source":"osv","ecosystem":"PyPI","package":"mxnet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1"}]}],"versions":["0.10.0","0.10.0.post2","0.11.0","0.12.0","0.12.1","0.9.5","0.9.5.post1","0.9.5.post2","1.0.0","1.0.0.post0","1.0.0.post1","1.0.0.post2","1.0.0.post3","1.0.0.post4","1.1.0","1.1.0.post0","1.2.0","1.2.1","1.2.1.post0","1.2.1.post1","1.3.0","1.3.0.post0","1.3.1","1.4.0","1.4.0.post0","1.4.1","1.5.0","1.5.1","1.5.1.post0","1.6.0","1.7.0.post1","1.7.0.post2","1.8.0","1.8.0.post0","1.9.0"]}],"products":[{"vendor":"apache","product":"mxnet"},{"vendor":"apache software foundation","product":"apache mxnet"}],"references":[{"url":"https://lists.apache.org/thread/b1fbfmvzlr2bbp95lqoh3mtovclfcl3o","tags":["x_refsource_MISC","x_transferred","Mailing List","Vendor Advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/07/24/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24294","tags":["advisory"]},{"url":"https://github.com/apache/mxnet/releases/tag/1.9.1","tags":["web"]},{"url":"https://github.com/advisories/GHSA-xxj3-55p6-xg3h","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24294.json","tags":["advisory"]},{"url":"https://github.com/apache/mxnet","tags":["package"]},{"url":"https://pypi.org/project/mxnet","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2022-24294","title":"ReDoS in Apache MXNet RTC Module","description":"A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to use excessive resources to attempt a match. This issue affects Apache MXNet versions prior to 1.9.1.","status":"published","published":"2022-07-24T17:45:12Z","modified":"2024-08-03T04:07:02.34Z","cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:34.940806Z"}],"euvd":[{"id":"EUVD-2022-6456","description":"A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to use excessive resources to attempt a match. This issue affects Apache MXNet versions prior to 1.9.1.","status":"published","published":"2022-07-24T17:45:12Z","modified":"2024-08-03T04:07:02Z","updated_at":"2026-11-03T03:25:48.993963Z"}],"ghsa":[{"id":"GHSA-xxj3-55p6-xg3h","title":"Apache MXNet vulnerable to potential denial-of-service by excessive resource consumption","description":"A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to use excessive resources to attempt a match. This issue affects Apache MXNet versions prior to 1.9.1.","status":"published","published":"2022-07-25T00:00:31Z","modified":"2023-03-01T20:32:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:36:46.526285Z"}],"nvd":[{"id":"CVE-2022-24294","description":"A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to use excessive resources to attempt a match. This issue affects Apache MXNet versions prior to 1.9.1.","status":"published","published":"2022-07-24T18:15:09.587Z","modified":"2026-06-17T04:31:33.89Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:07:24.037422Z"}],"osv":[{"id":"GHSA-xxj3-55p6-xg3h","title":"Apache MXNet vulnerable to potential denial-of-service by excessive resource consumption","description":"A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to use excessive resources to attempt a match. This issue affects Apache MXNet versions prior to 1.9.1.","status":"published","published":"2022-07-25T00:00:31Z","modified":"2026-07-07T11:56:45.385644914Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:47:00.604718Z"},{"id":"PYSEC-2026-850","title":"Apache MXNet vulnerable to potential denial-of-service by excessive resource consumption","description":"A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to use excessive resources to attempt a match. This issue affects Apache MXNet versions prior to 1.9.1.","status":"published","published":"2026-07-06T08:03:31.59572Z","modified":"2026-07-07T11:56:45.385644914Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"BIT-mxnet-2022-24294","description":"A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to use excessive resources to attempt a match. This issue affects Apache MXNet versions prior to 1.9.1.","status":"published","published":"2023-11-06T08:56:03.274Z","modified":"2026-07-07T11:56:45.385644914Z","updated_at":"2026-11-02T15:28:33.469426Z"},{"id":"CVE-2022-24294","title":"ReDoS in Apache MXNet RTC Module","description":"A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to use excessive resources to attempt a match. This issue affects Apache MXNet versions prior to 1.9.1.","status":"published","published":"2022-07-24T17:45:12Z","modified":"2026-10-28T02:31:06.528637836Z","cwes":["CWE-400"],"updated_at":"2026-11-02T15:44:24.428403Z"}]}}