Heap OOB in `RaggedGather`

🗓️ 25 Aug 2021 14:43:59Reported by GitHub Advisory DatabaseType

Heap OOB in `RaggedGather` can trigger heap buffer read outside bounds in TensorFlow

Reporter	Title	Published	Views	Family All 102
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in TensorFlow	17 Dec 202104:21	–	ibm
ATTACKERKB	CVE-2021-37641	12 Aug 202121:15	–	attackerkb
Circl	CVE-2021-37641	13 Aug 202100:40	–	circl
CNNVD	Google TensorFlow缓冲区错误漏洞	12 Aug 202100:00	–	cnnvd
CNVD	Google TensorFlow Buffer Overflow Vulnerability (CNVD-2022-09855)	8 Oct 202100:00	–	cnvd
CVE	CVE-2021-37641	12 Aug 202120:30	–	cve
Cvelist	CVE-2021-37641 Heap OOB in `RaggedGather` in TensorFlow	12 Aug 202120:30	–	cvelist
Debian CVE	CVE-2021-37641	12 Aug 202120:30	–	debiancve
EUVD	EUVD-2021-0367	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Wind River Linux	30 Aug 202100:00	–	ncsc

Vulners

Node

tensorflow-gpupip

tensorflow-gpuRange2.4.0–2.4.3pip

tensorflow-gpuRange<2.3.4pip

tensorflow-cpupip

tensorflow-cpuRange2.4.0–2.4.3pip

tensorflow-cpuRange<2.3.4pip

tensorflow tensorflowRange2.4.0–2.4.3pip

Source	Link
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-9c8h-vvrj-w2p8
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-37641
github	www.github.com/tensorflow/tensorflow/commit/a2b743f6017d7b97af1fe49087ae15f0ac634373
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-554.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-752.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-263.yaml
github	www.github.com/advisories/GHSA-9c8h-vvrj-w2p8

13 Nov 2024 16:24Current

7.1High risk

Vulners AI Score7.1

CVSS 23.6

CVSS 3.17.1 - 7.3

EPSS0.00013