Lucene search

Incomplete validation of shapes in multiple TF ops

🗓️ 10 Nov 2021 19:38:03Reported by GitHub Advisory DatabaseType

Incomplete validation of shapes in multiple TF ops. Missing validation for tensor arguments leading to undefined behavior and heap array access

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 15
Veracode	Denial Of Service (DoS)	9 Nov 202113:01	–	veracode
OSV	CVE-2021-41206	5 Nov 202122:15	–	osv
OSV	BIT-TENSORFLOW-2021-41206	6 Mar 202411:16	–	osv
OSV	PYSEC-2021-843	5 Nov 202122:15	–	osv
OSV	GHSA-PGCQ-H79J-2F69 Incomplete validation of shapes in multiple TF ops	10 Nov 202119:03	–	osv
OSV	GHSA-43Q8-3FV7-PR5X Improper Validation of Integrity Check Value in TensorFlow	9 Feb 202223:37	–	osv
OSV	PYSEC-2021-847	5 Nov 202122:15	–	osv
OSV	PYSEC-2021-845	5 Nov 202122:15	–	osv
OSV	OPENSUSE-SU-2024:12116-1 tensorflow-lite-2.9.1-1.1 on GA media	15 Jun 202400:00	–	osv
Cvelist	CVE-2021-41206 Incomplete validation of shapes in multiple TF ops	5 Nov 202122:05	–	cvelist

Vulners

Node

tensorflow-gpuRange<2.4.4

tensorflow-gpuRange2.5.0–2.5.2

tensorflow-gpuRange2.6.0–2.6.1

tensorflow-cpuRange<2.4.4

tensorflow-cpuRange2.5.0–2.5.2

tensorflow-cpuRange2.6.0–2.6.1

tensorflow tensorflowRange<2.4.4

tensorflow tensorflowRange2.5.0–2.5.2

tensorflow tensorflowRange2.6.0–2.6.1

Source	Link
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-pgcq-h79j-2f69
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-41206
github	www.github.com/tensorflow/tensorflow/commit/4d74d8a00b07441cba090a02e0dd9ed385145bf4
github	www.github.com/tensorflow/tensorflow/commit/4dddb2fd0b01cdd196101afbba6518658a2c9e07
github	www.github.com/tensorflow/tensorflow/commit/579261dcd446385831fe4f7457d802a59685121d
github	www.github.com/tensorflow/tensorflow/commit/68422b215e618df5ad375bcdc6d2052e9fd3080a
github	www.github.com/tensorflow/tensorflow/commit/da4aad5946be30e5f049920fa076e1f7ef021261
github	www.github.com/tensorflow/tensorflow/commit/e7f497570abb6b4ae5af4970620cd880e4c0c904
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-845.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-847.yaml

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Nov 2021 19:03Current

0.6Low risk

Vulners AI Score0.6

CVSS24.6

CVSS37 - 7.8

EPSS0.0001

CWE-354