1073 matches found
PT-2023-22485 · Unknown +4 · Llvm-Project +4
Name of the Vulnerable Software and Affected Versions: llvm-project affected versions not specified Description: A segmentation fault was discovered in the llvm-project via the component mlir::IROperandmlir::OpOperand. Recommendations: At the moment, there is no information about a newer version...
PT-2022-36689
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE 1 crash. Technical details about the crash include the functions asn build unsigned int64, snmp build...
Denial Of Service (DoS)
tensorflow is vulnerable to denial of service. The vulnerability exists in Compute function in batchkernels.cc because Unbatch Op kernel doesn't properly check if the input argument is a scalar which allows an attacker to send non-scalar input IDs causing an application crash...
CVE-2022-36013
TensorFlow is an open source platform for machine learning. When mlir::tfg::GraphDefImporter::ConvertNodeDef tries to convert NodeDefs without an op name, it crashes. We have patched the issue in GitHub commit a0f0b9a21c9270930457095092f558fbad4c03e5. The fix will be included in TensorFlow 2.10.0...
CVE-2022-36013
TensorFlow is an open source platform for machine learning. When "mlir::tfg::GraphDefImporter::ConvertNodeDef" tries to convert NodeDefs without an op name, it crashes. We have patched the issue in GitHub commit a0f0b9a21c9270930457095092f558fbad4c03e5. The fix will be included in TensorFlow...
CVE-2022-36013
TensorFlow is an open source platform for machine learning. When mlir::tfg::GraphDefImporter::ConvertNodeDef tries to convert NodeDefs without an op name, it crashes. We have patched the issue in GitHub commit a0f0b9a21c9270930457095092f558fbad4c03e5. The fix will be included in TensorFlow 2.10.0...
GHSA-828C-5J5Q-VRJQ TensorFlow vulnerable to null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef`
Impact When mlir::tfg::GraphDefImporter::ConvertNodeDef tries to convert NodeDefs without an op name, it crashes. cpp Status GraphDefImporter::ConvertNodeDefOpBuilder &builder, ConversionState &s, const NodeDef &node VLOG4 opdef; else auto it = functionopdefs.findnode.op; if it ==...
Stack overflow
TensorFlow is an open source platform for machine learning. The implementation of tf.reshape op in TensorFlow is vulnerable to a denial of service via CHECK-failure assertion failure caused by overflowing the number of elements in a tensor. This issue has been patched in GitHub commit...
PT-2022-23046
Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1, 2.8.1, and 2.7.2 Description The RaggedRangOp function takes an argument limits that is eventually used to construct a TensorShape as an int64. If limits is a very large float, it...
PT-2022-33691
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.64 Description The issue is related to an error exit in the privcmd ioctl dm op function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.15.64,...
PT-2022-23058
Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The implementation of AvgPool3DGradOp does not fully validate the input orig inpu...
PT-2022-23113
Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The issue occurs when the mlir::tfg::GraphDefImporter::ConvertNodeDef function...
CVE-2022-37079
TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the function setOpModeCfg...
TOTOLINK A7000R 操作系统命令注入漏洞
The TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in TOTOLINK A7000R version V9.1.0u.6115B20201022, which stems from a command injection issue in the hostName parameter of the setOpModeCfg method...
PT-2022-32648
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.18 through 5.15.55 Description The issue is related to the incomplete initialization of 'struct kvm lapic irq' in the kvm pv kick cpu op function. The actual impact and potential for attack have not been proven yet...
PT-2022-32429
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.13 Description The issue is related to the incomplete initialization of 'struct kvm lapic irq' in the kvm pv kick cpu op function. The actual impact and potential for attack have not been proven yet...
PT-2022-32824
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.132 Description The issue is related to the incomplete initialization of 'struct kvm lapic irq' in the kvm pv kick cpu op function. The actual impact and potential for attack have not been proven yet...
PT-2022-20534 · Laminas · Laminas Diactoros
Name of the Vulnerable Software and Affected Versions: laminas-diactoros versions prior to 2.11.1 Description: The laminas-diactoros PHP package is vulnerable to potential host, protocol, and/or port modification of a LaminasDiactorosUri instance associated with the incoming server request, based...