Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-80696
HistoryNov 22, 2022 - 12:00 a.m.

Google TensorFlow buffer overflow vulnerability (CNVD-2022-80696)

2022-11-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Google TensorFlow is an end-to-end open source platform for machine learning from Google (Google). Google TensorFlow is vulnerable to a buffer overflow vulnerability that originates when an operation with a specified input size receives a different number of inputs, and the executor will crash. No details of the vulnerability are currently available.

CPENameOperatorVersion
google tensorfloweq2.10.0

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H