CVE-2022-41887

🗓️ 18 Nov 2022 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 87 Views

TensorFlow crash due to size mismatch during broadcast assignment patched in GitHub commit c5b30379ba87cbe774b08ac50c1f6d36df4ebb7c. Fix included in TensorFlow 2.11, cherrypicked for 2.10.1 and 2.9.

Reporter	Title	Published	Views	Family All 26
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulerabilities in TensorFlow	6 Jul 202317:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in TensorFlow	30 Jan 202317:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	2 Feb 202303:37	–	ibm
IBM Security Bulletins	Security Bulletin: tensorflow-2.7.3-cp37 vulnerable to CVE-2022-41911 CVE-2022-41907 CVE-2022-41908 CVE-2022-41896 CVE-2022-41891 CVE-2022-41894 CVE-2022-41884 IBM Maximo Application Suite - Monitor Component	6 Jun 202321:17	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties in Open Source packages affecting IBM Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:35	–	ibm
Circl	CVE-2022-41887	19 Nov 202200:29	–	circl
CNNVD	Google TensorFlow 安全漏洞	18 Nov 202200:00	–	cnnvd
CNVD	Google TensorFlow tf.keras.losses.poisson buffer overflow vulnerability	23 Nov 202200:00	–	cnvd
Cvelist	CVE-2022-41887 Overflow in `tf.keras.losses.poisson` in Tensorflow	18 Nov 202200:00	–	cvelist
Debian CVE	CVE-2022-41887	18 Nov 202200:00	–	debiancve

NVD

Vulners

Node

google tensorflowRange2.9.0–2.9.3

google tensorflowMatch2.10.0

[
  {
    "vendor": "tensorflow",
    "product": "tensorflow",
    "versions": [
      {
        "version": ">= 2.10.0, < 2.10.1",
        "status": "affected"
      },
      {
        "version": "< 2.9.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/tensorflow/tensorflow/commit/c5b30379ba87cbe774b08ac50c1f6d36df4ebb7c
github	www.github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/cwise_ops_common.h
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-8fvv-46hw-vpg3
github	www.github.com/tensorflow/tensorflow/blob/master/tensorflow/python/keras/losses.py