AZL-11535 CVE-2022-41897 affecting package tensorflow for versions less than 2.11.0-1

🗓️ 18 Nov 2022 22:15:19Reported by GoogleType

osv🔗 osv.dev👁 1 Views

TensorFlow FractionMaxPoolGrad crash with large inputs; fix in commit d71090c3e5c and backported to versions two eleven, two ten one, two nine three, and two eight four.

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulerabilities in TensorFlow	6 Jul 202317:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in TensorFlow	30 Jan 202317:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	2 Feb 202303:37	–	ibm
IBM Security Bulletins	Security Bulletin: tensorflow-2.7.3-cp37 vulnerable to CVE-2022-41911 CVE-2022-41907 CVE-2022-41908 CVE-2022-41896 CVE-2022-41891 CVE-2022-41894 CVE-2022-41884 IBM Maximo Application Suite - Monitor Component	6 Jun 202321:17	–	ibm
CBLMariner	CVE-2022-41897 affecting package tensorflow for versions less than 2.11.0-1	9 Dec 202220:03	–	cbl_mariner
Circl	CVE-2022-41897	19 Nov 202200:29	–	circl
CNNVD	Google TensorFlow 缓冲区错误漏洞	18 Nov 202200:00	–	cnnvd
CNVD	Google TensorFlow buffer overflow vulnerability (CNVD-2023-15774)	23 Nov 202200:00	–	cnvd
CVE	CVE-2022-41897	18 Nov 202200:00	–	cve
Cvelist	CVE-2022-41897 `FractionalMaxPoolGrad` Heap out of bounds read in Tensorflow	18 Nov 202200:00	–	cvelist