p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in tensorflow · Seite 8

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für tensorflow: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 434

  1. CVE-2022-23565

    Mittel · CVSS 6.5EPSS 0,47%Korrektur verfügbar

    `CHECK`-failures in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. An attacker can trigger denial of service via assertion failure by altering a `SavedModel` on disk such that `AttrDef`s of some operation are duplicated. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. CVE-2022-23562

    Hoch · CVSS 7.6EPSS 0,58%Korrektur verfügbar

    Integer overflow in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `Range` suffers from integer overflows. These can trigger undefined behavior or, in some scenarios, extremely large allocations. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. CVE-2022-23563

    Hoch · CVSS 7.1EPSS 0,11%Korrektur verfügbar

    Insecure temporary file in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. In multiple places, TensorFlow uses `tempfile.mktemp` to create temporary files. While this is acceptable in testing, in utilities and libraries it is dangerous as a different process can create the file between the check for the filename in `mktemp` and the actual creation of the file by a subsequent operation (a TOC/TOU type of weakness). In several instances, TensorFlow was supposed to actually create a temporary directory instead of a file. This logic bug is hidden away by the `mktemp` function usage. We have patched the issue in several commits, replacing `mktemp` with the safer `m

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗

  4. CVE-2022-23559

    Hoch · CVSS 8.8EPSS 1,18%Korrektur verfügbar

    Integer overflow in TFLite

    Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in embedding lookup operations. Both `embedding_size` and `lookup_size` are products of values provided by the user. Hence, a malicious user could trigger overflows in the multiplication. In certain scenarios, this can then result in heap OOB read/write. Users are advised to upgrade to a patched version.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. CVE-2022-23560

    Hoch · CVSS 8.8EPSS 0,84%Korrektur verfügbar

    Read and Write outside of bounds in TFLite

    Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would allow limited reads and writes outside of arrays in TFLite. This exploits missing validation in the conversion from sparse tensors to dense tensors. The fix is included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. Users are advised to upgrade as soon as possible.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. CVE-2022-23574

    Hoch · CVSS 8.8EPSS 0,84%Korrektur verfügbar

    Out of bounds read and write in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. There is a typo in TensorFlow's `SpecializeType` which results in heap OOB read/write. Due to a typo, `arg` is initialized to the `i`th mutable argument in a loop where the loop index is `j`. Hence it is possible to assign to `arg` from outside the vector of arguments. Since this is a mutable proto value, it allows both read and write to outside of bounds data. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. CVE-2022-23571

    Mittel · CVSS 6.5EPSS 0,47%Korrektur verfügbar

    Reachable Assertion in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, a TensorFlow process can encounter cases where a `CHECK` assertion is invalidated based on user controlled arguments, if the tensors have an invalid `dtype` and 0 elements or an invalid shape. This allows attackers to cause denial of services in TensorFlow processes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. CVE-2022-23566

    Hoch · CVSS 8.8EPSS 0,93%Korrektur verfügbar

    Out of bounds write in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. TensorFlow is vulnerable to a heap OOB write in `Grappler`. The `set_output` function writes to an array at the specified index. Hence, this gives a malicious user a write primitive. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. CVE-2022-23577

    Mittel · CVSS 6.5EPSS 0,79%Korrektur verfügbar

    Null-dereference in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `GetInitOp` is vulnerable to a crash caused by dereferencing a null pointer. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  10. CVE-2022-23578

    Mittel · CVSS 4.3EPSS 0,72%Korrektur verfügbar

    Memory leak in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. If a graph node is invalid, TensorFlow can leak memory in the implementation of `ImmutableExecutorState::Initialize`. Here, we set `item->kernel` to `nullptr` but it is a simple `OpKernel*` pointer so the memory that was previously allocated to it would leak. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  11. CVE-2022-23572

    Mittel · CVSS 6.5EPSS 1%Korrektur verfügbar

    Crash when type cannot be specialized in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, TensorFlow can fail to specialize a type during shape inference. This case is covered by the `DCHECK` function however, `DCHECK` is a no-op in production builds and an assertion failure in debug builds. In the first case execution proceeds to the `ValueOrDie` line. This results in an assertion failure as `ret` contains an error `Status`, not a value. In the second case we also get a crash due to the assertion failure. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also aff

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  12. CVE-2022-23573

    Hoch · CVSS 7.6EPSS 0,76%Korrektur verfügbar

    Uninitialized variable access in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `AssignOp` can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized (to minimize number of allocations), but does not check that the right hand side is also initialized. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  13. CVE-2022-23585

    Mittel · CVSS 4.3EPSS 1%Korrektur verfügbar

    Memory leak in decoding PNG images in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. When decoding PNG images TensorFlow can produce a memory leak if the image is invalid. After calling `png::CommonInitDecode(..., &decode)`, the `decode` value contains allocated buffers which can only be freed by calling `png::CommonFreeDecode(&decode)`. However, several error case in the function implementation invoke the `OP_REQUIRES` macro which immediately terminates the execution of the function, without allowing for the memory free to occur. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  14. CVE-2022-23579

    Mittel · CVSS 6.5EPSS 0,83%Korrektur verfügbar

    `CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `SafeToRemoveIdentity` would trigger `CHECK` failures. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  15. CVE-2022-23580

    Mittel · CVSS 6.5EPSS 0,83%Korrektur verfügbar

    Abort caused by allocating a vector that is too large in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. During shape inference, TensorFlow can allocate a large vector based on a value from a tensor controlled by the user. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  16. CVE-2022-23581

    Mittel · CVSS 6.5EPSS 1,16%Korrektur verfügbar

    `CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `IsSimplifiableReshape` would trigger `CHECK` failures. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  17. CVE-2022-23575

    Mittel · CVSS 6.5EPSS 0,79%Korrektur verfügbar

    Integer overflow in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCostEstimator::CalculateTensorSize` is vulnerable to an integer overflow if an attacker can create an operation which would involve a tensor with large enough number of elements. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  18. CVE-2022-23576

    Mittel · CVSS 6.5EPSS 0,78%Korrektur verfügbar

    Integer overflow in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCostEstimator::CalculateOutputSize` is vulnerable to an integer overflow if an attacker can create an operation which would involve tensors with large enough number of elements. We can have a large enough number of dimensions in `output_shape.dim()` or just a small number of dimensions being large enough to cause an overflow in the multiplication. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  19. CVE-2022-23588

    Mittel · CVSS 6.5EPSS 0,87%Korrektur verfügbar

    `CHECK`-fails due to attempting to build a reference tensor in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that Grappler optimizer would attempt to build a tensor using a reference `dtype`. This would result in a crash due to a `CHECK`-fail in the `Tensor` constructor as reference types are not allowed. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  20. CVE-2022-23589

    Mittel · CVSS 6.5EPSS 1,11%Korrektur verfügbar

    Null pointer dereference in Grappler's `IsConstant` in Tensorflow

    Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow can trigger a null pointer dereference. There are 2 places where this can occur, for the same malicious alteration of a `SavedModel` file (fixing the first one would trigger the same dereference in the second place). First, during constant folding, the `GraphDef` might not have the required nodes for the binary operation. If a node is missing, the correposning `mul_*child` would be null, and the dereference in the subsequent line would be incorrect. We have a similar issue during `IsIdentityConsumingSwitch`. The fix will be inclu

    tensorflow tensorflow tensorflow tensorflowPython
    • Auf 2.5.3 aktualisieren
    • Auf 2.6.3 aktualisieren
    • Auf 2.7.1 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →