p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in tensorflow-gpu · Seite 9

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für tensorflow-gpu: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 427

  1. CVE-2022-23595

    Mittel · CVSS 5.3EPSS 0,78%Korrektur verfügbar

    Null pointer dereference in TensorFlow

    Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so `flr->config_proto` is `nullptr`. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. CVE-2022-23594

    Hoch · CVSS 8.8EPSS 0,14%Korrektur verfügbar

    Out of bounds read in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow (MLIR) makes several assumptions about the incoming `GraphDef` before converting it to the MLIR-based dialect. If an attacker changes the `SavedModel` format on disk to invalidate these assumptions and the `GraphDef` is then converted to MLIR-based IR then they can cause a crash in the Python interpreter. Under certain scenarios, heap OOB read/writes are possible. These issues have been discovered via fuzzing and it is possible that more weaknesses exist. We will patch them as they are discovered.

    tensorflow-gpuPython
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. CVE-2022-23590

    Mittel · CVSS 5.9EPSS 0,98%Korrektur verfügbar

    Crash due to erroneous `StatusOr` in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process to crash due to encountering a `StatusOr` value that is an error and forcibly extracting the value from it. We have patched the issue in multiple GitHub commits and these will be included in TensorFlow 2.8.0 and TensorFlow 2.7.1, as both are affected.

    tensorflow-gpu tensorflow-gpuPython
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  4. CVE-2022-23591

    Hoch · CVSS 7.5EPSS 0,8%Korrektur verfügbar

    Stack overflow in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The `GraphDef` format in TensorFlow does not allow self recursive functions. The runtime assumes that this invariant is satisfied. However, a `GraphDef` containing a fragment such as the following can be consumed when loading a `SavedModel`. This would result in a stack overflow during execution as resolving each `NodeDef` means resolving the function itself and its nodes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. CVE-2022-23593

    Mittel · CVSS 5.9EPSS 0,87%Korrektur verfügbar

    Segfault in `simplifyBroadcast` in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The `simplifyBroadcast` function in the MLIR-TFRT infrastructure in TensorFlow is vulnerable to a segfault (hence, denial of service), if called with scalar shapes. If all shapes are scalar, then `maxRank` is 0, so we build an empty `SmallVector`. The fix will be included in TensorFlow 2.8.0. This is the only affected version.

    tensorflow-gpu tensorflow-gpuPython
    • Auf 2.8.0 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. CVE-2022-21740

    Hoch · CVSS 7.6EPSS 0,79%Korrektur verfügbar

    Heap overflow in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` is vulnerable to a heap overflow. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. CVE-2022-21741

    Mittel · CVSS 6.5EPSS 0,83%Korrektur verfügbar

    Division by zero in TFLite

    Tensorflow is an Open Source Machine Learning Framework. ### Impact An attacker can craft a TFLite model that would trigger a division by zero in the implementation of depthwise convolutions. The parameters of the convolution can be user controlled and are also used within a division operation to determine the size of the padding that needs to be added before applying the convolution. There is no check before this division that the divisor is strictly positive. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in s

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. CVE-2022-21737

    Mittel · CVSS 6.5EPSS 0,79%Korrektur verfügbar

    Assertion failure based denial of service in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `*Bincount` operations allows malicious users to cause denial of service by passing in arguments which would trigger a `CHECK`-fail. There are several conditions that the input arguments must satisfy. Some are not caught during shape inference and others are not caught during kernel implementation. This results in `CHECK` failures later when the output tensors get allocated. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. CVE-2022-21738

    Mittel · CVSS 6.5EPSS 0,79%Korrektur verfügbar

    Integer overflow leading to crash in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  10. CVE-2022-21739

    Mittel · CVSS 6.5EPSS 0,79%Korrektur verfügbar

    Null pointer dereference in TensorFlow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `QuantizedMaxPool` has an undefined behavior where user controlled inputs can trigger a reference binding to null pointer. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  11. CVE-2022-21734

    Mittel · CVSS 6.5EPSS 0,79%Korrektur verfügbar

    `CHECK`-failures in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `MapStage` is vulnerable a `CHECK`-fail if the key tensor is not a scalar. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  12. CVE-2022-21735

    Mittel · CVSS 6.5EPSS 0,79%Korrektur verfügbar

    Division by zero in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `FractionalMaxPool` can be made to crash a TensorFlow process via a division by 0. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  13. CVE-2022-23569

    Mittel · CVSS 6.5EPSS 0,46%Korrektur verfügbar

    `CHECK`-fails when building invalid tensor shapes in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. Multiple operations in TensorFlow can be used to trigger a denial of service via `CHECK`-fails (i.e., assertion failures). This is similar to TFSA-2021-198 and has similar fixes. We have patched the reported issues in multiple GitHub commits. It is possible that other similar instances exist in TensorFlow, we will issue fixes as these are discovered. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  14. CVE-2022-21729

    Mittel · CVSS 6.5EPSS 0,79%Korrektur verfügbar

    Overflow and uncaught divide by zero in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `UnravelIndex` is vulnerable to a division by zero caused by an integer overflow bug. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  15. CVE-2022-21725

    Mittel · CVSS 6.5EPSS 0,79%Korrektur verfügbar

    Division by zero in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The estimator for the cost of some convolution operations can be made to execute a division by 0. The function fails to check that the stride argument is strictly positive. Hence, the fix is to add a check for the stride argument to ensure it is valid. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  16. CVE-2022-21736

    Hoch · CVSS 7.6EPSS 0,75%Korrektur verfügbar

    Undefined behavior in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseTensorSliceDataset` has an undefined behavior: under certain condition it can be made to dereference a `nullptr` value. The 3 input arguments to `SparseTensorSliceDataset` represent a sparse tensor. However, there are some preconditions that these arguments must satisfy but these are not validated in the implementation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  17. CVE-2022-23567

    Mittel · CVSS 6.5EPSS 1,11%Korrektur verfügbar

    Integer overflows in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementations of `Sparse*Cwise*` ops are vulnerable to integer overflows. These can be used to trigger large allocations (so, OOM based denial of service) or `CHECK`-fails when building new `TensorShape` objects (so, assert failures based denial of service). We are missing some validation on the shapes of the input tensors as well as directly constructing a large `TensorShape` with user-provided dimensions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and st

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  18. CVE-2022-23568

    Mittel · CVSS 6.5EPSS 0,81%Korrektur verfügbar

    Integer overflows in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `AddManySparseToTensorsMap` is vulnerable to an integer overflow which results in a `CHECK`-fail when building new `TensorShape` objects (so, an assert failure based denial of service). We are missing some validation on the shapes of the input tensors as well as directly constructing a large `TensorShape` with user-provided dimensions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  19. CVE-2022-21731

    Mittel · CVSS 6.5EPSS 0,85%Korrektur verfügbar

    Type confusion leading to segfault in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ConcatV2` can be used to trigger a denial of service attack via a segfault caused by a type confusion. The `axis` argument is translated into `concat_dim` in the `ConcatShapeHelper` helper function. Then, a value for `min_rank` is computed based on `concat_dim`. This is then used to validate that the `values` tensor has at least the required rank. However, `WithRankAtLeast` receives the lower bound as a 64-bits value and then compares it against the maximum 32-bits integer value that could be represented. Due to the fact that `min_rank` is a 32

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  20. CVE-2022-21733

    Mittel · CVSS 4.3EPSS 0,83%Korrektur verfügbar

    Memory exhaustion in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `StringNGrams` can be used to trigger a denial of service attack by causing an out of memory condition after an integer overflow. We are missing a validation on `pad_witdh` and that result in computing a negative value for `ngram_width` which is later used to allocate parts of the output. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow-gpu tensorflow-gpu tensorflow-gpu tensorflow-gpuPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →