TensorFlow has Floating Point Exception in TFLite in conv kernel

🗓️ 24 Mar 2023 21:53:39Reported by GitHub Advisory DatabaseType

TensorFlow TFLite FPE in conv kernel with filter_input_channel less than 1

Reporter	Title	Published	Views	Family All 32
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM Robotic Process Automation	31 Aug 202314:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data Are Addressed	8 Dec 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulerabilities in TensorFlow	6 Jul 202317:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in TensorFlow ( CVE-2023-27579)	28 Jun 202320:35	–	ibm
CBLMariner	CVE-2023-27579 affecting package tensorflow for versions less than 2.11.1-1	15 Oct 202308:09	–	cbl_mariner
CBLMariner	CVE-2023-27579 affecting package tensorflow for versions less than 2.11.1-1	31 Jan 202516:08	–	cbl_mariner
Circl	CVE-2023-27579	25 Mar 202306:38	–	circl
CNNVD	Google TensorFlow 安全漏洞	25 Mar 202300:00	–	cnnvd
CVE	CVE-2023-27579	24 Mar 202323:05	–	cve
Cvelist	CVE-2023-27579 TensorFlow has Floating Point Exception in TFLite in conv kernel	24 Mar 202323:05	–	cvelist

Vulners

Node

tensorflow-gpuRange<2.11.1pip

tensorflow-cpuRange<2.11.1pip

Source	Link
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-5w96-866f-6rm8
github	www.github.com/tensorflow/tensorflow/commit/34f8368c535253f5c9cb3a303297743b62442aaa
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-27579
github	www.github.com/advisories/GHSA-5w96-866f-6rm8

30 Mar 2023 22:23Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

EPSS0.00206

SSVC