Google TensorFlow 安全漏洞

🗓️ 18 Nov 2022 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 2 Views

谷歌 TensorFlow 存在缓冲区溢出漏洞，影响 2.8.4 及以下和部分 2.x 版本，通过 TensorListResize 的非标量大小输入引发拒绝服务。

Reporter	Title	Published	Views	Family All 32
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulerabilities in TensorFlow	6 Jul 202317:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in TensorFlow	30 Jan 202317:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	2 Feb 202303:37	–	ibm
IBM Security Bulletins	Security Bulletin: tensorflow-2.7.3-cp37 vulnerable to CVE-2022-41911 CVE-2022-41907 CVE-2022-41908 CVE-2022-41896 CVE-2022-41891 CVE-2022-41894 CVE-2022-41884 IBM Maximo Application Suite - Monitor Component	6 Jun 202321:17	–	ibm
CBLMariner	CVE-2022-41893 affecting package tensorflow for versions less than 2.11.0-1	9 Dec 202220:03	–	cbl_mariner
Circl	CVE-2022-41893	19 Nov 202200:29	–	circl
CNVD	Google TensorFlow tf.raw_ops.TensorListResize buffer overflow vulnerability	23 Nov 202200:00	–	cnvd
CVE	CVE-2022-41893	18 Nov 202200:00	–	cve
Cvelist	CVE-2022-41893 `CHECK_EQ` fail in `tf.raw_ops.TensorListResize` in Tensorflow	18 Nov 202200:00	–	cvelist
Debian CVE	CVE-2022-41893	18 Nov 202200:00	–	debiancve

Source	Link
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-67pf-62xr-q35m
github	www.github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/list_kernels.cc
github	www.github.com/tensorflow/tensorflow/commit/888e34b49009a4e734c27ab0c43b0b5102682c56
cxsecurity	www.cxsecurity.com/cveshow/CVE-2022-41893/

24 May 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.14.8 - 7.5

EPSS0.00195

SSVC

TensorFlow 漏洞缓冲区溢出 TensorListResize 非标量输入拒绝服务受影响版本版本号范围