CVE-2022-41897

🗓️ 18 Nov 2022 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 85 Views

CVE-2022-41897: TensorFlow crashing due to input size issue, fixed in GitHub commit d71090c3e5ca325bdf4b02eb236cfb3ee823e927

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulerabilities in TensorFlow	6 Jul 202317:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in TensorFlow	30 Jan 202317:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	2 Feb 202303:37	–	ibm
IBM Security Bulletins	Security Bulletin: tensorflow-2.7.3-cp37 vulnerable to CVE-2022-41911 CVE-2022-41907 CVE-2022-41908 CVE-2022-41896 CVE-2022-41891 CVE-2022-41894 CVE-2022-41884 IBM Maximo Application Suite - Monitor Component	6 Jun 202321:17	–	ibm
CBLMariner	CVE-2022-41897 affecting package tensorflow for versions less than 2.11.0-1	9 Dec 202220:03	–	cbl_mariner
Circl	CVE-2022-41897	19 Nov 202200:29	–	circl
CNNVD	Google TensorFlow 缓冲区错误漏洞	18 Nov 202200:00	–	cnnvd
CNVD	Google TensorFlow buffer overflow vulnerability (CNVD-2023-15774)	23 Nov 202200:00	–	cnvd
Cvelist	CVE-2022-41897 `FractionalMaxPoolGrad` Heap out of bounds read in Tensorflow	18 Nov 202200:00	–	cvelist
Debian CVE	CVE-2022-41897	18 Nov 202200:00	–	debiancve

NVD

Vulners

Node

google tensorflowRange<2.8.4

google tensorflowRange2.9.0–2.9.3

google tensorflowRange2.10.0–2.10.1

[
  {
    "vendor": "tensorflow",
    "product": "tensorflow",
    "versions": [
      {
        "version": ">= 2.10.0, < 2.10.1",
        "status": "affected"
      },
      {
        "version": ">= 2.9.0, < 2.9.3",
        "status": "affected"
      },
      {
        "version": "< 2.8.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-f2w8-jw48-fr7j
github	www.github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/fractional_max_pool_op.cc
github	www.github.com/tensorflow/tensorflow/commit/d71090c3e5ca325bdf4b02eb236cfb3ee823e927

21 Nov 2024 07:24Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.14.8 - 7.5

EPSS0.0015

SSVC

CWE-125