CVE-2022-24294

A regular expression used in Apache MXNet (incubating) is vulnerable to a potential denial-of-service by excessive resource consumption. The bug could be exploited when loading a model in Apache MXNet that has a specially crafted operator name that would cause the regular expression evaluation to use excessive resources to attempt a match. This issue affects Apache MXNet versions prior to 1.9.1.

• CWE-400

• http://www.openwall.com/lists/oss-security/2022/07/24/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/b1fbfmvzlr2bbp95lqoh3mtovclfcl3oMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2022/07/24/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/b1fbfmvzlr2bbp95lqoh3mtovclfcl3oMailing List, Vendor Advisory

Published

Jul 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24289Hessian serialization is a network protocol that supports ob…8.8
• CVE-2022-2429The Ultimate SMS Notifications for WooCommerce plugin for Wo…8
• CVE-2022-24290A vulnerability has been identified in Teamcenter V12.4 (All…7.5
• CVE-2022-24291Certain HP Print devices may be vulnerable to potential info…7.5
• CVE-2022-24292Certain HP Print devices may be vulnerable to potential info…9.8
• CVE-2022-24293Certain HP Print devices may be vulnerable to potential info…9.8
• CVE-2022-24295Okta Advanced Server Access Client for Windows prior to vers…8.8
• CVE-2022-24296Use of a Broken or Risky Cryptographic Algorithm vulnerabili…7.5
• CVE-2022-24297Improper buffer restrictions in firmware for some Intel(R) N…6.7
• CVE-2022-24298All versions of package freeopcua/freeopcua are vulnerable t…7.5
• CVE-2022-24299Improper input validation vulnerability in pfSense CE and pf…8.8
• CVE-2022-2430The Visual Composer Website Builder plugin for WordPress is …5.4