Vulnerability	Vulnerable Version
C Out-of-bounds Write lightgbm is a gradient boosting framework that uses tree based learning algorithms. Affected versions of this package are vulnerable to Out-of-bounds Write in `linkers_socket.cpp`, used during initialization of distributed training. An attacker can exploit a race condition to connect to a node while it is waiting for a legitimate connection from a configured peer, and send an arbitrary `rank` value. This may trigger an exploitable crash on the affected node. How to fix Out-of-bounds Write? Upgrade `lightgbm` to version 4.6.0 or higher.	[,4.6.0)

Out-of-bounds Write

lightgbm is a gradient boosting framework that uses tree based learning algorithms.

Affected versions of this package are vulnerable to Out-of-bounds Write in linkers_socket.cpp, used during initialization of distributed training. An attacker can exploit a race condition to connect to a node while it is waiting for a legitimate connection from a configured peer, and send an arbitrary rank value. This may trigger an exploitable crash on the affected node.

How to fix Out-of-bounds Write?

Upgrade lightgbm to version 4.6.0 or higher.

[,4.6.0)

Go back to all versions of this package