p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in tensorflow-gpu · Seite 16

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für tensorflow-gpu: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 427

  1. CVE-2021-29591

    Hoch · CVSS 7.3EPSS 0,26%Korrektur verfügbar

    Stack overflow due to looping TFLite subgraph

    TensorFlow is an end-to-end open source platform for machine learning. TFlite graphs must not have loops between nodes. However, this condition was not checked and an attacker could craft models that would result in infinite loop during evaluation. In certain cases, the infinite loop would be replaced by stack overflow due to too many recursive calls. For example, the `While` implementation(https://github.com/tensorflow/tensorflow/blob/106d8f4fb89335a2c52d7c895b7a7485465ca8d9/tensorflow/lite/kernels/while.cc) could be tricked into a scneario where both the body and the loop subgraphs are the same. Evaluating one of the subgraphs means calling

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. CVE-2021-29592

    Mittel · CVSS 4.4EPSS 0,21%Korrektur verfügbar

    Null pointer dereference in TFLite's `Reshape` operator

    TensorFlow is an end-to-end open source platform for machine learning. The fix for CVE-2020-15209(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15209) missed the case when the target shape of `Reshape` operator is given by the elements of a 1-D tensor. As such, the fix for the vulnerability(https://github.com/tensorflow/tensorflow/blob/9c1dc920d8ffb4893d6c9d27d1f039607b326743/tensorflow/lite/core/subgraph.cc#L1062-L1074) allowed passing a null-buffer-backed tensor with a 1D shape. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. CVE-2021-29593

    Niedrig · CVSS 2.5EPSS 0,2%Korrektur verfügbar

    Division by zero in TFLite's implementation of `BatchToSpaceNd`

    TensorFlow is an end-to-end open source platform for machine learning. The implementation of the `BatchToSpaceNd` TFLite operator is vulnerable to a division by zero error(https://github.com/tensorflow/tensorflow/blob/b5ed552fe55895aee8bd8b191f744a069957d18d/tensorflow/lite/kernels/batch_to_space_nd.cc#L81-L82). An attacker can craft a model such that one dimension of the `block` input is 0. Hence, the corresponding value in `block_shape` is 0. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in s

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  4. CVE-2021-29594

    Niedrig · CVSS 2.5EPSS 0,2%Korrektur verfügbar

    Division by zero in TFLite's convolution code

    TensorFlow is an end-to-end open source platform for machine learning. TFLite's convolution code(https://github.com/tensorflow/tensorflow/blob/09c73bca7d648e961dd05898292d91a8322a9d45/tensorflow/lite/kernels/conv.cc) has multiple division where the divisor is controlled by the user and not checked to be non-zero. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. CVE-2021-29595

    Niedrig · CVSS 2.5EPSS 0,2%Korrektur verfügbar

    Division by zero in TFLite's implementation of `DepthToSpace`

    TensorFlow is an end-to-end open source platform for machine learning. The implementation of the `DepthToSpace` TFLite operator is vulnerable to a division by zero error(https://github.com/tensorflow/tensorflow/blob/0d45ea1ca641b21b73bcf9c00e0179cda284e7e7/tensorflow/lite/kernels/depth_to_space.cc#L63-L69). An attacker can craft a model such that `params->block_size` is 0. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.3.4 aktualisieren
    • Auf 2.4.2 aktualisieren
    • Auf 2.4.3 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. CVE-2021-29596

    Niedrig · CVSS 2.5EPSS 0,2%Korrektur verfügbar

    Division by zero in TFLite's implementation of `EmbeddingLookup`

    TensorFlow is an end-to-end open source platform for machine learning. The implementation of the `EmbeddingLookup` TFLite operator is vulnerable to a division by zero error(https://github.com/tensorflow/tensorflow/blob/e4b29809543b250bc9b19678ec4776299dd569ba/tensorflow/lite/kernels/embedding_lookup.cc#L73-L74). An attacker can craft a model such that the first dimension of the `value` input is 0. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. CVE-2021-29597

    Niedrig · CVSS 2.5EPSS 0,2%Korrektur verfügbar

    Division by zero in TFLite's implementation of `SpaceToBatchNd`

    TensorFlow is an end-to-end open source platform for machine learning. The implementation of the `SpaceToBatchNd` TFLite operator is [vulnerable to a division by zero error](https://github.com/tensorflow/tensorflow/blob/412c7d9bb8f8a762c5b266c9e73bfa165f29aac8/tensorflow/lite/kernels/space_to_batch_nd.cc#L82-L83). An attacker can craft a model such that one dimension of the `block` input is 0. Hence, the corresponding value in `block_shape` is 0. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. CVE-2021-29598

    Niedrig · CVSS 2.5EPSS 0,2%Korrektur verfügbar

    Division by zero in TFLite's implementation of `SVDF`

    TensorFlow is an end-to-end open source platform for machine learning. The implementation of the `SVDF` TFLite operator is vulnerable to a division by zero error(https://github.com/tensorflow/tensorflow/blob/7f283ff806b2031f407db64c4d3edcda8fb9f9f5/tensorflow/lite/kernels/svdf.cc#L99-L102). An attacker can craft a model such that `params->rank` would be 0. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. CVE-2021-29599

    Niedrig · CVSS 2.5EPSS 0,21%Korrektur verfügbar

    Division by zero in TFLite's implementation of `Split`

    TensorFlow is an end-to-end open source platform for machine learning. The implementation of the `Split` TFLite operator is vulnerable to a division by zero error(https://github.com/tensorflow/tensorflow/blob/e2752089ef7ce9bcf3db0ec618ebd23ea119d0c7/tensorflow/lite/kernels/split.cc#L63-L65). An attacker can craft a model such that `num_splits` would be 0. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  10. CVE-2021-29600

    Niedrig · CVSS 2.5EPSS 0,2%Korrektur verfügbar

    Division by zero in TFLite's implementation of `OneHot`

    TensorFlow is an end-to-end open source platform for machine learning. The implementation of the `OneHot` TFLite operator is vulnerable to a division by zero error(https://github.com/tensorflow/tensorflow/blob/f61c57bd425878be108ec787f4d96390579fb83e/tensorflow/lite/kernels/one_hot.cc#L68-L72). An attacker can craft a model such that at least one of the dimensions of `indices` would be 0. In turn, the `prefix_dim_size` value would become 0. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in suppo

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  11. CVE-2021-29601

    Mittel · CVSS 6.3EPSS 0,19%Korrektur verfügbar

    Integer overflow in TFLite concatentation

    TensorFlow is an end-to-end open source platform for machine learning. The TFLite implementation of concatenation is vulnerable to an integer overflow issue(https://github.com/tensorflow/tensorflow/blob/7b7352a724b690b11bfaae2cd54bc3907daf6285/tensorflow/lite/kernels/concatenation.cc#L70-L76). An attacker can craft a model such that the dimensions of one of the concatenation input overflow the values of `int`. TFLite uses `int` to represent tensor dimensions, whereas TF uses `int64`. Hence, valid TF models can trigger an integer overflow when converted to TFLite format. The fix will be included in TensorFlow 2.5.0. We will also cherrypick thi

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  12. CVE-2021-29602

    Niedrig · CVSS 2.5EPSS 0,19%Korrektur verfügbar

    Division by zero in TFLite's implementation of `DepthwiseConv`

    TensorFlow is an end-to-end open source platform for machine learning. The implementation of the `DepthwiseConv` TFLite operator is vulnerable to a division by zero error(https://github.com/tensorflow/tensorflow/blob/1a8e885b864c818198a5b2c0cbbeca5a1e833bc8/tensorflow/lite/kernels/depthwise_conv.cc#L287-L288). An attacker can craft a model such that `input`'s fourth dimension would be 0. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  13. CVE-2021-29603

    Niedrig · CVSS 2.5EPSS 0,2%Korrektur verfügbar

    Heap OOB write in TFLite

    TensorFlow is an end-to-end open source platform for machine learning. A specially crafted TFLite model could trigger an OOB write on heap in the TFLite implementation of `ArgMin`/`ArgMax`(https://github.com/tensorflow/tensorflow/blob/102b211d892f3abc14f845a72047809b39cc65ab/tensorflow/lite/kernels/arg_min_max.cc#L52-L59). If `axis_value` is not a value between 0 and `NumDimensions(input)`, then the condition in the `if` is never true, so code writes past the last valid element of `output_dims->data`. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and T

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  14. CVE-2021-29604

    Niedrig · CVSS 2.5EPSS 0,19%Korrektur verfügbar

    Division by zero in TFLite's implementation of hashtable lookup

    TensorFlow is an end-to-end open source platform for machine learning. The TFLite implementation of hashtable lookup is vulnerable to a division by zero error(https://github.com/tensorflow/tensorflow/blob/1a8e885b864c818198a5b2c0cbbeca5a1e833bc8/tensorflow/lite/kernels/hashtable_lookup.cc#L114-L115) An attacker can craft a model such that `values`'s first dimension would be 0. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  15. CVE-2021-29605

    Hoch · CVSS 7.1EPSS 0,22%Korrektur verfügbar

    Integer overflow in TFLite memory allocation

    TensorFlow is an end-to-end open source platform for machine learning. The TFLite code for allocating `TFLiteIntArray`s is vulnerable to an integer overflow issue(https://github.com/tensorflow/tensorflow/blob/4ceffae632721e52bf3501b736e4fe9d1221cdfa/tensorflow/lite/c/common.c#L24-L27). An attacker can craft a model such that the `size` multiplier is so large that the return value overflows the `int` datatype and becomes negative. In turn, this results in invalid value being given to `malloc`(https://github.com/tensorflow/tensorflow/blob/4ceffae632721e52bf3501b736e4fe9d1221cdfa/tensorflow/lite/c/common.c#L47-L52). In this case, `ret->size` wou

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  16. CVE-2021-29606

    Hoch · CVSS 7.1EPSS 0,21%Korrektur verfügbar

    Heap OOB read in TFLite

    TensorFlow is an end-to-end open source platform for machine learning. A specially crafted TFLite model could trigger an OOB read on heap in the TFLite implementation of `Split_V`(https://github.com/tensorflow/tensorflow/blob/c59c37e7b2d563967da813fa50fe20b21f4da683/tensorflow/lite/kernels/split_v.cc#L99). If `axis_value` is not a value between 0 and `NumDimensions(input)`, then the `SizeOfDimension` function(https://github.com/tensorflow/tensorflow/blob/102b211d892f3abc14f845a72047809b39cc65ab/tensorflow/lite/kernels/kernel_util.h#L148-L150) will access data outside the bounds of the tensor shape array. The fix will be included in TensorFlow

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  17. CVE-2021-29607

    Mittel · CVSS 5.3EPSS 0,23%Korrektur verfügbar

    Incomplete validation in `SparseSparseMinimum`

    TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in `SparseAdd` results in allowing attackers to exploit undefined behavior (dereferencing null pointers) as well as write outside of bounds of heap allocated data. The implementation(https://github.com/tensorflow/tensorflow/blob/656e7673b14acd7835dc778867f84916c6d1cac2/tensorflow/core/kernels/sparse_sparse_binary_op_shared.cc) has a large set of validation for the two sparse tensor inputs (6 tensors in total), but does not validate that the tensors are not empty or that the second dimension of `*_indices` matches the size of corresponding `*_shape`. T

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  18. CVE-2021-29608

    Mittel · CVSS 5.3EPSS 0,23%Korrektur verfügbar

    Heap OOB and null pointer dereference in `RaggedTensorToTensor`

    TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in `tf.raw_ops.RaggedTensorToTensor`, an attacker can exploit an undefined behavior if input arguments are empty. The implementation(https://github.com/tensorflow/tensorflow/blob/656e7673b14acd7835dc778867f84916c6d1cac2/tensorflow/core/kernels/ragged_tensor_to_tensor_op.cc#L356-L360) only checks that one of the tensors is not empty, but does not check for the other ones. There are multiple `DCHECK` validations to prevent heap OOB, but these are no-op in release builds, hence they don't prevent anything. The fix will be included in TensorFlow 2.5.0

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.0rc0 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.0rc0 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.3.4 aktualisieren
    • Auf 2.4.2 aktualisieren
    • Auf 2.4.3 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  19. CVE-2021-29609

    Mittel · CVSS 5.3EPSS 0,23%Korrektur verfügbar

    Incomplete validation in `SparseAdd`

    TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in `SparseAdd` results in allowing attackers to exploit undefined behavior (dereferencing null pointers) as well as write outside of bounds of heap allocated data. The implementation(https://github.com/tensorflow/tensorflow/blob/656e7673b14acd7835dc778867f84916c6d1cac2/tensorflow/core/kernels/sparse_add_op.cc) has a large set of validation for the two sparse tensor inputs (6 tensors in total), but does not validate that the tensors are not empty or that the second dimension of `*_indices` matches the size of corresponding `*_shape`. This allows attack

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.4.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  20. CVE-2021-29610

    Niedrig · CVSS 3.6EPSS 0,2%Korrektur verfügbar

    Invalid validation in `QuantizeAndDequantizeV2`

    TensorFlow is an end-to-end open source platform for machine learning. The validation in `tf.raw_ops.QuantizeAndDequantizeV2` allows invalid values for `axis` argument:. The validation(https://github.com/tensorflow/tensorflow/blob/eccb7ec454e6617738554a255d77f08e60ee0808/tensorflow/core/kernels/quantize_and_dequantize_op.cc#L74-L77) uses `||` to mix two different conditions. If `axis_ < -1` the condition in `OP_REQUIRES` will still be true, but this value of `axis_` results in heap underflow. This allows attackers to read/write to other data on the heap. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on Tens

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.1.4 aktualisieren
    • Auf 2.2.0rc0 aktualisieren
    • Auf 2.2.3 aktualisieren
    • Auf 2.3.0rc0 aktualisieren
    • Auf 2.3.3 aktualisieren
    • Auf 2.3.4 aktualisieren
    • Auf 2.4.2 aktualisieren
    • Auf 2.4.3 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →