p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in tensorflow · Seite 7

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für tensorflow: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 434

  1. CVE-2022-29206

    Mittel · CVSS 5.5EPSS 0,36%Korrektur verfügbar

    Missing validation results in undefined behavior in `SparseTensorDenseAdd` in TensorFlow

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.SparseTensorDenseAdd` does not fully validate the input arguments. In this case, a reference gets bound to a `nullptr` during kernel execution. This is undefined behavior. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.6.4 aktualisieren
    • Auf 2.7.2 aktualisieren
    • Auf 2.8.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. CVE-2022-29207

    Mittel · CVSS 5.5EPSS 0,33%Korrektur verfügbar

    Undefined behavior when users supply invalid resource handles in TensorFlow

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, multiple TensorFlow operations misbehave in eager mode when the resource handle provided to them is invalid. In graph mode, it would have been impossible to perform these API calls, but migration to TF 2.x eager mode opened up this vulnerability. If the resource handle is empty, then a reference is bound to a null pointer inside TensorFlow codebase (various codepaths). This is undefined behavior. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.6.4 aktualisieren
    • Auf 2.7.2 aktualisieren
    • Auf 2.8.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. CVE-2022-29195

    Mittel · CVSS 5.5EPSS 0,33%Korrektur verfügbar

    Missing validation causes denial of service in TensorFlow via `StagePeek`

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.StagePeek` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. The code assumes `index` is a scalar but there is no validation for this before accessing its value. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.6.4 aktualisieren
    • Auf 2.7.2 aktualisieren
    • Auf 2.8.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  4. CVE-2022-29197

    Mittel · CVSS 5.5EPSS 0,33%Korrektur verfügbar

    Missing validation causes denial of service in TensorFlow via `UnsortedSegmentJoin`

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.UnsortedSegmentJoin` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. The code assumes `num_segments` is a scalar but there is no validation for this before accessing its value. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.6.4 aktualisieren
    • Auf 2.7.2 aktualisieren
    • Auf 2.8.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. CVE-2022-29196

    Mittel · CVSS 5.5EPSS 0,33%Korrektur verfügbar

    Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.Conv3DBackpropFilterV2` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. The code does not validate that the `filter_sizes` argument is a vector. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.6.4 aktualisieren
    • Auf 2.7.2 aktualisieren
    • Auf 2.8.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. CVE-2022-29198

    Mittel · CVSS 5.5EPSS 0,33%Korrektur verfügbar

    Missing validation causes denial of service in TensorFlow via `SparseTensorToCSRSparseMatrix`

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.SparseTensorToCSRSparseMatrix` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. The code assumes `dense_shape` is a vector and `indices` is a matrix (as part of requirements for sparse tensors) but there is no validation for this. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.6.4 aktualisieren
    • Auf 2.7.2 aktualisieren
    • Auf 2.8.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. CVE-2022-29199

    Mittel · CVSS 5.5EPSS 0,33%Korrektur verfügbar

    Missing validation causes denial of service in TensorFlow via `LoadAndRemapMatrix`

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.LoadAndRemapMatrix does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. The code assumes `initializing_values` is a vector but there is no validation for this before accessing its value. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.6.4 aktualisieren
    • Auf 2.7.2 aktualisieren
    • Auf 2.8.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. CVE-2022-29200

    Mittel · CVSS 5.5EPSS 0,33%Korrektur verfügbar

    Missing validation causes denial of service in TensorFlow via `LSTMBlockCell`

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.LSTMBlockCell` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. The code does not validate the ranks of any of the arguments to this API call. This results in `CHECK`-failures when the elements of the tensor are accessed. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.6.4 aktualisieren
    • Auf 2.7.2 aktualisieren
    • Auf 2.8.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. CVE-2022-29193

    Mittel · CVSS 5.5EPSS 0,33%Korrektur verfügbar

    Missing validation causes `TensorSummaryV2` in TensorFlow to crash

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.TensorSummaryV2` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.6.4 aktualisieren
    • Auf 2.7.2 aktualisieren
    • Auf 2.8.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  10. CVE-2022-29194

    Mittel · CVSS 5.5EPSS 0,33%Korrektur verfügbar

    Missing validation causes denial of service via `DeleteSessionTensor` in TensorFlow

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.DeleteSessionTensor` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.6.4 aktualisieren
    • Auf 2.7.2 aktualisieren
    • Auf 2.8.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  11. CVE-2022-29191

    Mittel · CVSS 5.5EPSS 0,36%Korrektur verfügbar

    Missing validation causes denial of service via `GetSessionTensor` in TensorFlow

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.GetSessionTensor` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.6.4 aktualisieren
    • Auf 2.7.2 aktualisieren
    • Auf 2.8.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  12. CVE-2022-29192

    Mittel · CVSS 5.5EPSS 0,35%Korrektur verfügbar

    Missing validation crashes `QuantizeAndDequantizeV4Grad` in TensorFlow

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.QuantizeAndDequantizeV4Grad` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.6.4 aktualisieren
    • Auf 2.7.2 aktualisieren
    • Auf 2.8.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  13. GHSA-h6gw-r52c-724r

    Kritisch · CVSS 9.3Korrektur verfügbar

    NULL Pointer Dereference and Access of Uninitialized Pointer in TensorFlow

    ### Impact The [code for boosted trees in TensorFlow](https://github.com/tensorflow/tensorflow/blob/e0b6e58c328059829c3eb968136f17aa72b6c876/tensorflow/core/kernels/boosted_trees/stats_ops.cc) is still missing validation. This allows malicious users to read and write outside of bounds of heap allocated data as well as trigger denial of service (via dereferencing `nullptr`s or via `CHECK`-failures). This follows after CVE-2021-41208 where these APIs were still vulnerable to multiple security issues. **Note**: Given that the boosted trees implementation in TensorFlow is unmaintained, it is recommend to no longer use these APIs. Instead, ple

    tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  14. GHSA-43q8-3fv7-pr5x

    Hoch · CVSS 7Korrektur verfügbar

    Improper Validation of Integrity Check Value in TensorFlow

    ### Impact The implementation of [`tf.sparse.split`](https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/sparse_split_op.cc#L26-L102) does not fully validate the input arguments. Hence, a malicious user can trigger a denial of service via a segfault or a heap OOB read: ```python import tensorflow as tf data = tf.random.uniform([1, 32, 32], dtype=tf.float32) axis = [1, 2] x = tf.sparse.from_dense(data) result = tf.sparse.split(x,3, axis=axis) ``` The code assumes `axis` is a scalar. This is another instance of [TFSA-2021-190](https://github.com/tensorflow/tensorflow/blob/master/tensor

    tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  15. GHSA-wcv5-vrvr-3rx2

    Mittel · CVSS 5.5Korrektur verfügbar

    Integer Overflow or Wraparound in TensorFlow

    ### Impact The Grappler component of TensorFlow is vulnerable to a denial of service via `CHECK`-failure (assertion failure) in [constant folding](https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L963-L1035): ```cc for (const auto& output_prop : output_props) { const PartialTensorShape output_shape(output_prop.shape()); // ... } ``` The `output_prop` tensor has a shape that is controlled by user input and this can result in triggering one of the `CHECK`s in the `PartialTensorShape` constructor. This is an instance of [TFSA-2021-198](h

    tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  16. CVE-2022-23561

    Hoch · CVSS 8.8EPSS 0,54%Korrektur verfügbar

    Out of bounds write in TFLite

    Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive under certain conditions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  17. CVE-2022-23557

    Mittel · CVSS 6.5EPSS 0,76%Korrektur verfügbar

    Division by zero in TFLite

    Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would trigger a division by zero in `BiasAndClamp` implementation. There is no check that the `bias_size` is non zero. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  18. CVE-2022-23558

    Hoch · CVSS 7.6EPSS 0,82%Korrektur verfügbar

    Integer overflow in TFLite array creation

    Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in `TfLiteIntArrayCreate`. The `TfLiteIntArrayGetSizeInBytes` returns an `int` instead of a `size_t. An attacker can control model inputs such that `computed_size` overflows the size of `int` datatype. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  19. CVE-2022-23570

    Mittel · CVSS 6.5EPSS 1%Korrektur verfügbar

    Null-dereference in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is guarded by a `DCHECK`. However, `DCHECK` is a no-op in production builds and an assertion failure in debug builds. In the first case execution proceeds to the dereferencing of the null pointer, whereas in the second case it results in a crash due to the assertion failure. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also affec

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  20. CVE-2022-23564

    Mittel · CVSS 6.5EPSS 0,47%Korrektur verfügbar

    Reachable Assertion in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. When decoding a resource handle tensor from protobuf, a TensorFlow process can encounter cases where a `CHECK` assertion is invalidated based on user controlled arguments. This allows attackers to cause denial of services in TensorFlow processes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →