CVE catalog
CVE-2024-5187
ONNX vulnerability
- Severity
- Medium
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.17% · Oct 25, 2026
A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability enables attackers to overwrite any file on the system, potentially leading to remote code execution, deletion of system, personal, or application files, thus impacting the integrity and availability of the system. The issue arises from the function's handling of tar file extraction without performing security checks on the paths within the tar file, as demonstrated by the ability to overwrite the `/home/kali/.ssh/authorized_keys` file by specifying an absolute path in the malicious tar file.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | onnx | sid | 1.20.0-6 | fixed |
| Debian | onnx | forky | 1.20.0-6 | fixed |
| Debian | onnx | trixie | 1.17.0-3 | fixed |
| Debian | onnx | bookworm | 1.12.0-2 | not affected |
| Ubuntu | onnx | noble | 1.14.1-2.1ubuntu0.1~esm1 | fixed |
| Ubuntu | libonnx-dev | noble | 1.14.1-2.1ubuntu0.1~esm1 | fixed |
| Ubuntu | libonnx-testdata | noble | 1.14.1-2.1ubuntu0.1~esm1 | fixed |
| Ubuntu | libonnx1t64 | noble | 1.14.1-2.1ubuntu0.1~esm1 | fixed |
| Ubuntu | python3-onnx | noble | 1.14.1-2.1ubuntu0.1~esm1 | fixed |
| Ubuntu | onnx | pro | 1.13.1-3 | vulnerable |
| Ubuntu | onnx | pro | 1.13.1-3build1 | vulnerable |
| Ubuntu | onnx | pro | 1.14.1-2 | vulnerable |
| Ubuntu | onnx | pro | 1.14.1-2.1 | vulnerable |
| Ubuntu | onnx | pro | 1.14.1-2.1build1 | vulnerable |
| Ubuntu | onnx | pro | 1.14.1-2.1build2 | vulnerable |
| Ubuntu | onnx | pro | 1.14.1-2.1ubuntu0.1~esm1 | fixed |
| Ubuntu | onnx | pro | 1.13.1-3 | vulnerable |
| Ubuntu | onnx | pro | 1.13.1-3build1 | vulnerable |
| Ubuntu | onnx | pro | 1.14.1-2 | vulnerable |
| Ubuntu | onnx | pro | 1.14.1-2.1 | vulnerable |
| Ubuntu | onnx | pro | 1.14.1-2.1build1 | vulnerable |
| Ubuntu | onnx | pro | 1.14.1-2.1build2 | vulnerable |
| Ubuntu | onnx | pro | 1.14.1-2.1ubuntu0.1~esm1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | onnx | source | sid | 1.16.2-1 | not yet assigned | Not reported | [1075852] |
| Debian | onnx | source | forky | 1.16.2-1 | not yet assigned | Not reported | [1075852] |
| Debian | onnx | source | trixie | 1.16.2-1 | not yet assigned | Not reported | [1075852] |
| Debian | onnx | source | bookworm | Not affected | unimportant | Not reported | [1075852] |
| Ubuntu | onnx | deb | noble | 1.14.1-2.1ubuntu0.1~esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libonnx-dev | deb | noble | 1.14.1-2.1ubuntu0.1~esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libonnx-testdata | deb | noble | 1.14.1-2.1ubuntu0.1~esm1 | Not reported | Not reported | Not reported |
| Ubuntu | libonnx1t64 | deb | noble | 1.14.1-2.1ubuntu0.1~esm1 | Not reported | Not reported | Not reported |
| Ubuntu | python3-onnx | deb | noble | 1.14.1-2.1ubuntu0.1~esm1 | Not reported | Not reported | Not reported |
| Ubuntu | onnx | deb | pro | 1.14.1-2.1ubuntu0.1~esm1 | Not reported | USN-8307-1 | Not reported |
| Ubuntu | onnx | deb | pro | 1.14.1-2.1ubuntu0.1~esm1 | Not reported | UBUNTU-CVE-2024-5187 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [libonnx1]Not affected
Source package: [onnx]
Details (2)
1.12.0-2+b4· amd64 · bookwormNot affected
usn · onnx · debian · bookworm
1.12.0-2+b4· arm64 · bookwormNot affected
usn · onnx · debian · bookworm
- [libonnx-dev]Not affected
Source package: [onnx]
Details (2)
1.12.0-2+b4· amd64 · bookwormNot affected
usn · onnx · debian · bookworm
1.12.0-2+b4· arm64 · bookwormNot affected
usn · onnx · debian · bookworm
- [libonnxifi]Not affected
Source package: [onnx]
Details (2)
1.12.0-2+b4· amd64 · bookwormNot affected
usn · onnx · debian · bookworm
1.12.0-2+b4· arm64 · bookwormNot affected
usn · onnx · debian · bookworm
- [libonnx-testdata]Not affected
Source package: [onnx]
Details (2)
1.12.0-2· all · bookwormNot affected
usn · onnx · debian · bookworm
1.12.0-2· all · bookwormNot affected
usn · onnx · debian · bookworm
- [python3-onnx]Not affected
Source package: [onnx]
Details (2)
1.12.0-2+b4· amd64 · bookwormNot affected
usn · onnx · debian · bookworm
1.12.0-2+b4· arm64 · bookwormNot affected
usn · onnx · debian · bookworm
[Debian 13 (Trixie)]
- [libonnx1t64]Fixed
Source package: [onnx]
Details (2)
1.17.0-3+b1· amd64 · trixieFixed · Fixed:
1.16.2-1usn · onnx · debian · 13
1.17.0-3+b1· arm64 · trixieFixed · Fixed:
1.16.2-1usn · onnx · debian · 13
- [libonnx-dev]Fixed
Source package: [onnx]
Details (2)
1.17.0-3+b1· amd64 · trixieFixed · Fixed:
1.16.2-1usn · onnx · debian · 13
1.17.0-3+b1· arm64 · trixieFixed · Fixed:
1.16.2-1usn · onnx · debian · 13
- [libonnx-testdata]Fixed
Source package: [onnx]
Details (2)
1.17.0-3· all · trixieFixed · Fixed:
1.16.2-1usn · onnx · debian · 13
1.17.0-3· all · trixieFixed · Fixed:
1.16.2-1usn · onnx · debian · 13
- [python3-onnx]Fixed
Source package: [onnx]
Details (2)
1.17.0-3+b1· amd64 · trixieFixed · Fixed:
1.16.2-1usn · onnx · debian · 13
1.17.0-3+b1· arm64 · trixieFixed · Fixed:
1.16.2-1usn · onnx · debian · 13
Observed:
References
- [https://osv.dev/vulnerability/DEBIAN-CVE-2024-5187]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2024-5187]
- [https://osv.dev/vulnerability/USN-8307-1]
- [https://security-tracker.debian.org/tracker/CVE-2024-5187]
- [https://ubuntu.com/security/notices/USN-8307-1]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Ubuntu Security Notices (USN)]