PT-2021-21759 · Google · Tensorflow

🗓️ 12 Aug 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 5 Views

TensorFlow vulnerability: negative elements in num elements may crash TensorListReserve; upgrade or patch guidance.

Reporter	Title	Published	Views	Family All 2247
vulnersosv	abmarl (>=0.1.1 <=0.1.3), agrothon (>=1.1.5 <=1.3.2) +95 more potentially affected by CVE-2021-37653 via tensorflow (>=2.4.0 <=2.4.2)	25 Aug 202114:43	–	vulnersosv
vulnersosv	ai4bharat-transliteration (>=1.1.0 <=1.1.3), aipack (>=0.0.1 <=0.0.5) +53 more potentially affected by CVE-2020-26266 via tensorflow (>=2.0.0 <=2.0.3)	10 Dec 202023:15	–	vulnersosv
vulnersosv	abmarl (>=0.1.1 <=0.1.3), agrothon (>=1.1.5 <=1.3.2) +95 more potentially affected by CVE-2021-37685 via tensorflow (>=2.4.0 <=2.4.2)	12 Aug 202123:15	–	vulnersosv
vulnersosv	accuinsight (>=1.0.62 <=3.0.0rc2), adapt-diagnostics (>=1.2.0 <=1.6.0) +110 more potentially affected by CVE-2021-37642 via tensorflow (>=2.3.0 <=2.3.2)	12 Aug 202118:15	–	vulnersosv
vulnersosv	abmarl (>=0.1.1 <=0.1.3), agrothon (>=1.1.5 <=1.3.2) +95 more potentially affected by CVE-2021-37644 via tensorflow (>=2.4.0 <=2.4.2)	25 Aug 202114:43	–	vulnersosv
vulnersosv	abmarl (>=0.1.1 <=0.1.3), agrothon (>=1.1.5 <=1.3.2) +95 more potentially affected by CVE-2021-37655 via tensorflow (>=2.4.0 <=2.4.2)	12 Aug 202121:15	–	vulnersosv
vulnersosv	abmarl (>=0.1.1 <=0.1.3), agrothon (>=1.1.5 <=1.3.2) +95 more potentially affected by CVE-2021-37691 via tensorflow (>=2.4.0 <=2.4.2)	12 Aug 202123:15	–	vulnersosv
vulnersosv	abmarl (>=0.1.1 <=0.1.3), agrothon (>=1.1.5 <=1.3.2) +95 more potentially affected by CVE-2021-37686 via tensorflow (>=2.4.0 <=2.4.2)	12 Aug 202122:15	–	vulnersosv
vulnersosv	deep-floorplan (=0.0.0), mpunet (=0.2.9) +1 more potentially affected by CVE-2021-37657 via tensorflow-gpu (>=2.3.0 <=2.3.2)	12 Aug 202121:15	–	vulnersosv
vulnersosv	brainhance (=0.0.1), crystal4d (>=0.0.4 <=0.1.2) +4 more potentially affected by CVE-2021-37642 via tensorflow-gpu (>=2.4.0 <=2.4.2)	12 Aug 202118:15	–	vulnersosv

Source	Link
github	www.github.com/tensorflow/tensorflow/commit/8a6e874437670045e6c7dc6154c7412b4a2135e2
osv	www.osv.dev/vulnerability/CVE-2021-37644
osv	www.osv.dev/vulnerability/PYSEC-2021-557
osv	www.osv.dev/vulnerability/GHSA-27j5-4p9v-pp67
osv	www.osv.dev/vulnerability/openSUSE-SU-2022:10014-1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-37644
osv	www.osv.dev/vulnerability/PYSEC-2021-266
osv	www.osv.dev/vulnerability/PYSEC-2021-755
osv	www.osv.dev/vulnerability/BIT-tensorflow-2021-37644
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-27j5-4p9v-pp67

06 Mar 2024 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 45.7

CVSS 24.6

CVSS 3.18.8 - 9.3

EPSS0.00451