← All advisories

High severity8.4NVD Advisory· Published Oct 8, 2024· Updated Jun 17, 2026

CVE-2024-43497

CVE-2024-43497

Description

DeepSpeed Remote Code Execution Vulnerability

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
deepspeedPyPI	< 0.15.1	0.15.1

Affected products

3

Microsoft/Deepspeed2 versions
cpe:2.3:a:microsoft:deepspeed:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:deepspeed:*:*:*:*:*:*:*:*range: <0.15.1
- (no CPE)range: 0.1.1
ghsa-coords
pkg:pypi/deepspeed
Range: < 0.15.1

Patches

Vulnerability mechanics

References

5

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43497nvdPatchVendor AdvisoryWEB
github.com/advisories/GHSA-8cp5-3rf8-8gfhghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-43497ghsaADVISORY
github.com/microsoft/DeepSpeed/releases/tag/v0.15.1ghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/deepspeed/PYSEC-2024-109.yamlghsaWEB

News mentions

0

No linked articles in our index yet.