p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in tensorflow-gpu · Seite 11

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für tensorflow-gpu: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 427

  1. CVE-2021-41215

    Mittel · CVSS 5.5EPSS 0,19%Korrektur verfügbar

    Null pointer exception in `DeserializeSparse`

    TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `DeserializeSparse` can trigger a null pointer dereference. This is because the shape inference function assumes that the `serialize_sparse` tensor is a tensor with positive rank (and having `3` as the last dimension). The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. CVE-2021-41217

    Mittel · CVSS 5.5EPSS 0,19%Korrektur verfügbar

    Null pointer exception when `Exit` node is not preceded by `Enter` op

    TensorFlow is an open source platform for machine learning. In affected versions the process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not. This occurs because the code assumes that the first node in the pairing (e.g., an `Enter` node) always exists when encountering the second node (e.g., an `Exit` node). When this is not the case, `parent` is `nullptr` so dereferencing it causes a crash. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also a

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. CVE-2021-41219

    Hoch · CVSS 7.8EPSS 0,21%Korrektur verfügbar

    Undefined behavior via `nullptr` reference binding in sparse matrix multiplication

    TensorFlow is an open source platform for machine learning. In affected versions the code for sparse matrix multiplication is vulnerable to undefined behavior via binding a reference to `nullptr`. This occurs whenever the dimensions of `a` or `b` are 0 or less. In the case on one of these is 0, an empty output tensor should be allocated (to conserve the invariant that output tensors are always allocated when the operation is successful) but nothing should be written to it (that is, we should return early from the kernel implementation). Otherwise, attempts to write to this empty tensor would result in heap OOB access. The fix will be included

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  4. CVE-2021-41214

    Hoch · CVSS 7.8EPSS 0,22%Korrektur verfügbar

    Reference binding to `nullptr` in `tf.ragged.cross`

    TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `tf.ragged.cross` has an undefined behavior due to binding a reference to `nullptr`. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. CVE-2021-41204

    Mittel · CVSS 5.5EPSS 0,14%Korrektur verfügbar

    Segfault while copying constant resource tensor

    TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. CVE-2021-41226

    Hoch · CVSS 7.1EPSS 0,21%Korrektur verfügbar

    Heap OOB read in `SparseBinCount`

    TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseBinCount` is vulnerable to a heap OOB access. This is because of missing validation between the elements of the `values` argument and the shape of the sparse output. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. CVE-2021-41223

    Hoch · CVSS 7.1EPSS 0,21%Korrektur verfügbar

    Heap OOB read in `FusedBatchNorm` kernels

    TensorFlow is an open source platform for machine learning. In affected versions the implementation of `FusedBatchNorm` kernels is vulnerable to a heap OOB access. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. CVE-2021-41224

    Hoch · CVSS 7.1EPSS 0,21%Korrektur verfügbar

    `SparseFillEmptyRows` heap OOB read

    TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseFillEmptyRows` can be made to trigger a heap OOB access. This occurs whenever the size of `indices` does not match the size of `values`. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. CVE-2021-41212

    Hoch · CVSS 7.1EPSS 0,21%Korrektur verfügbar

    Heap OOB read in `tf.ragged.cross`

    TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `tf.ragged.cross` can trigger a read outside of bounds of heap allocated array. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  10. CVE-2021-41211

    Hoch · CVSS 7.1EPSS 0,21%Korrektur verfügbar

    Heap OOB read in shape inference for `QuantizeV2`

    TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `QuantizeV2` can trigger a read outside of bounds of heap allocated array. This occurs whenever `axis` is a negative value less than `-1`. In this case, we are accessing data before the start of a heap buffer. The code allows `axis` to be an optional argument (`s` would contain an `error::NOT_FOUND` error code). Otherwise, it assumes that `axis` is a valid index into the dimensions of the `input` tensor. If `axis` is less than `-1` then this results in a heap OOB read. The fix will be included in TensorFlow 2.7.0. We will also cherryp

    tensorflow-gpu tensorflow-gpuPython
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  11. CVE-2021-41205

    Hoch · CVSS 7.1EPSS 0,15%Korrektur verfügbar

    Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops

    TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for the `QuantizeAndDequantizeV*` operations can trigger a read outside of bounds of heap allocated array. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  12. CVE-2021-41210

    Hoch · CVSS 7.1EPSS 0,15%Korrektur verfügbar

    Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`

    TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for `SparseCountSparseOutput` can trigger a read outside of bounds of heap allocated array. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  13. CVE-2021-41201

    Hoch · CVSS 7.8EPSS 0,25%Korrektur verfügbar

    Unitialized access in `EinsumHelper::ParseEquation`

    TensorFlow is an open source platform for machine learning. In affeced versions during execution, `EinsumHelper::ParseEquation()` is supposed to set the flags in `input_has_ellipsis` vector and `*output_has_ellipsis` boolean to indicate whether there is ellipsis in the corresponding inputs and output. However, the code only changes these flags to `true` and never assigns `false`. This results in unitialized variable access if callers assume that `EinsumHelper::ParseEquation()` always sets these flags. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4,

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  14. CVE-2021-41200

    Mittel · CVSS 5.5EPSS 0,24%Korrektur verfügbar

    Incomplete validation in `tf.summary.create_file_writer`

    TensorFlow is an open source platform for machine learning. In affected versions if `tf.summary.create_file_writer` is called with non-scalar arguments code crashes due to a `CHECK`-fail. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  15. CVE-2021-41197

    Mittel · CVSS 5.5EPSS 0,32%Korrektur verfügbar

    Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes

    TensorFlow is an open source platform for machine learning. In affected versions TensorFlow allows tensor to have a large number of dimensions and each dimension can be as large as desired. However, the total number of elements in a tensor must fit within an `int64_t`. If an overflow occurs, `MultiplyWithoutOverflow` would return a negative result. In the majority of TensorFlow codebase this then results in a `CHECK`-failure. Newer constructs exist which return a `Status` instead of crashing the binary. This is similar to CVE-2021-29584. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, Ten

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  16. CVE-2021-41198

    Mittel · CVSS 5.5EPSS 0,24%Korrektur verfügbar

    Overflow/crash in `tf.tile` when tiling tensor is large

    TensorFlow is an open source platform for machine learning. In affected versions if `tf.tile` is called with a large input argument then the TensorFlow process will crash due to a `CHECK`-failure caused by an overflow. The number of elements in the output tensor is too much for the `int64_t` type and the overflow is detected via a `CHECK` statement. This aborts the process. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  17. CVE-2021-41199

    Mittel · CVSS 5.5EPSS 0,24%Korrektur verfügbar

    Overflow/crash in `tf.image.resize` when size is large

    TensorFlow is an open source platform for machine learning. In affected versions if `tf.image.resize` is called with a large input argument then the TensorFlow process will crash due to a `CHECK`-failure caused by an overflow. The number of elements in the output tensor is too much for the `int64_t` type and the overflow is detected via a `CHECK` statement. This aborts the process. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  18. CVE-2021-41196

    Mittel · CVSS 5.5EPSS 0,24%Korrektur verfügbar

    Crash in `max_pool3d` when size argument is 0 or negative

    TensorFlow is an open source platform for machine learning. In affected versions the Keras pooling layers can trigger a segfault if the size of the pool is 0 or if a dimension is negative. This is due to the TensorFlow's implementation of pooling operations where the values in the sliding window are not checked to be strictly positive. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    • Auf 2.7.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  19. CVE-2021-41195

    Mittel · CVSS 5.5EPSS 0,21%Korrektur verfügbar

    Crash in `tf.math.segment_*` operations

    TensorFlow is an open source platform for machine learning. In affected versions the implementation of `tf.math.segment_*` operations results in a `CHECK`-fail related abort (and denial of service) if a segment id in `segment_ids` is large. This is similar to CVE-2021-29584 (and similar other reported vulnerabilities in TensorFlow, localized to specific APIs): the implementation (both on CPU and GPU) computes the output shape using `AddDim`. However, if the number of elements in the tensor overflows an `int64_t` value, `AddDim` results in a `CHECK` failure which provokes a `std::abort`. Instead, code should use `AddDimWithStatus`. The fix wil

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.4.4 aktualisieren
    • Auf 2.5.2 aktualisieren
    • Auf 2.6.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  20. CVE-2021-37690

    Mittel · CVSS 6.6EPSS 0,16%Korrektur verfügbar

    Use after free and segfault in shape inference functions in TensorFlow

    TensorFlow is an end-to-end open source platform for machine learning. In affected versions when running shape functions, some functions (such as `MutableHashTableShape`) produce extra output information in the form of a `ShapeAndType` struct. The shapes embedded in this struct are owned by an inference context that is cleaned up almost immediately; if the upstream code attempts to access this shape information, it can trigger a segfault. `ShapeRefiner` is mitigating this for normal output shapes by cloning them (and thus putting the newly created shape under ownership of an inference context that will not die), but we were not doing the same

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.3.4 aktualisieren
    • Auf 2.4.3 aktualisieren
    • Auf 2.5.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →