`CHECK` fail via inputs in `SdcaOptimizer`

🗓️ 21 Nov 2022 21:54:26Reported by GitHub Advisory DatabaseType

`SdcaOptimizer` `CHECK` fail due to incorrect input ran

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulerabilities in TensorFlow	6 Jul 202317:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in TensorFlow	30 Jan 202317:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	2 Feb 202303:37	–	ibm
IBM Security Bulletins	Security Bulletin: tensorflow-2.7.3-cp37 vulnerable to CVE-2022-41911 CVE-2022-41907 CVE-2022-41908 CVE-2022-41896 CVE-2022-41891 CVE-2022-41894 CVE-2022-41884 IBM Maximo Application Suite - Monitor Component	6 Jun 202321:17	–	ibm
CBLMariner	CVE-2022-41899 affecting package tensorflow for versions less than 2.11.0-1	9 Dec 202220:03	–	cbl_mariner
Circl	CVE-2022-41899	19 Nov 202200:29	–	circl
CNNVD	Google TensorFlow 输入验证错误漏洞	18 Nov 202200:00	–	cnnvd
CNVD	Google TensorFlow Input Validation Error Vulnerability (CNVD-2023-15775)	23 Nov 202200:00	–	cnvd
CVE	CVE-2022-41899	18 Nov 202200:00	–	cve
Cvelist	CVE-2022-41899 `CHECK` fail via inputs in `SdcaOptimizer` in Tensorflow	18 Nov 202200:00	–	cvelist

Vulners

Node

tensorflow-gpuRange2.10.0–2.10.1pip

tensorflow-cpuRange2.10.0–2.10.1pip

tensorflow-gpuRange2.9.0–2.9.3pip

tensorflow-cpuRange2.9.0–2.9.3pip

tensorflow-gpuRange<2.8.4pip

tensorflow-cpuRange<2.8.4pip

tensorflow tensorflowRange2.10.0–2.10.1pip

tensorflow tensorflowRange2.9.0–2.9.3pip

Source	Link
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-27rc-728f-x5w2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-41899
github	www.github.com/tensorflow/tensorflow/commit/80ff197d03db2a70c6a111f97dcdacad1b0babfa
github	www.github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/sdca_internal.cc
github	www.github.com/advisories/GHSA-27rc-728f-x5w2

10 Jul 2023 19:02Current

7.5High risk

Vulners AI Score7.5

CVSS 3.14.8 - 7.5

EPSS0.00187

SSVC