59 matches found
animl (>=1.1.2, <=1.1.4), audio-classification-models (1.0.1) +9 more potentially affected by CVE-2022-23577 via tensorflow-gpu (>=2.6.0, <=2.6.2)
tensorflow-gpu PYPI version =2.6.0, =1.1.2, =0.1.5, =0.1.0, =0.9.0, =1.0.5, =1.0.6 Source cves: CVE-2022-23577 Source advisory: GHSA-8CXV-76P7-JXWR...
tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-23577 via tensorflow-gpu (2.7.0)
tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-23577 Source advisory: GHSA-8CXV-76P7-JXWR...
axelerate (>=0.5.2, <=0.5.5), bert-experimental (1.0.0) +24 more potentially affected by CVE-2022-23577 via tensorflow (1.15.2)
tensorflow PYPI version 1.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - axelerate =0.5.2, =2.0.1, =1.0.1, =0.1.0.dev1, =1.5.0.dev20210429, =1.5.0.dev20210512 - fedlearner-manylinux 1.5.0.dev20210429 -...
axelerate (>=0.5.8, <=0.5.9), bianbu-ai-toolkit-tf1 (1.0.6) +27 more potentially affected by CVE-2022-23577 via tensorflow (1.15.3)
tensorflow PYPI version 1.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - axelerate =0.5.8, =0.0.1.2, =0.0.13, =1.1.0, =0.22.0, =1.6.0, =4.1.3, =0.10.0.dev1, =0.11.0 - muffnn 2.3.1 - neoepiscope 0.4.0 and more...
aadhaar-detection (0.5.0), accuinsight (>=1.0.84, <=1.0.87) +33 more potentially affected by CVE-2022-23577 via tensorflow (2.7.0)
tensorflow PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aadhaar-detection 0.5.0 - accuinsight =1.0.84, =3.0.22, =0.1.11, =0.1.11, =0.1.11, =0.1.0, =0.0.1, =0.1.5.dev202303131412, =0.1.0, =0.1.1 an...
chicksexer (0.2.2), gender-detection (0.2.2) +2 more potentially affected by CVE-2022-23577 via tensorflow (1.0.1)
tensorflow PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - chicksexer 0.2.2 - gender-detection 0.2.2 - moodleinspire 0.0.10 - moodlemlbackend =0.0.2, =1.0.0 Source cves: CVE-2022-23577 Source advisor...
cde (>=0.1.0, <=0.2.0.1), nerlogparser (0.0.1) +1 more potentially affected by CVE-2022-23577 via tensorflow (1.4.1)
tensorflow PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cde =0.1.0, =0.1.7, =0.3.2 Source cves: CVE-2022-23577 Source advisory: OSV:GHSA-8CXV-76P7-JXWR...
CVE-2022-23577
creationtimestamp| type| source ---|---|--- 2022-02-05 02:42:23+00:00| seen| https://t.me/cibsecurity/36891...
CVE-2022-23577
Tensorflow is an Open Source Machine Learning Framework. The implementation of GetInitOp is vulnerable to a crash caused by dereferencing a null pointer. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, ...
jlpyutils (>=0.0.7, <=0.1.1) potentially affected by CVE-2022-23577 via tensorflow-gpu (1.12.2)
tensorflow-gpu PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - jlpyutils =0.0.7, =0.1.1 Source cves: CVE-2022-23577 Source advisory: OSV:PYSEC-2022-141...
arekit (>=0.21.0, <=0.22.1), arenets (>=0.23.0, <=0.23.1) +19 more potentially affected by CVE-2022-23577 via tensorflow-gpu (1.14.0)
tensorflow-gpu PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - arekit =0.21.0, =0.23.0, =1.0.0, =0.0.1, =0.1.6, =0.1.0, =0.0.6, =1.0.1, =1.0.2 - ocrd-anybaseocr 0.0.1 and more Source cves:...
azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), bent (>=0.0.9, <=0.0.27) +32 more potentially affected by CVE-2022-23577 via tensorflow-gpu (>=2.0.0, <=2.5.1)
tensorflow-gpu PYPI version =2.0.0, =0.0.1, =0.0.9, =0.0.4, =1.1.1, =1.1.0, =0.1.1, =0.1.0, =0.2.0, =0.6.4, =0.8.2 - maupassant 0.1.1 - mlreflect 0.16.0 and more Source cves: CVE-2022-23577 Source advisory: OSV:PYSEC-2022-141...
delft (0.2.2) potentially affected by CVE-2022-23577 via tensorflow-gpu (1.9.0)
tensorflow-gpu PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - delft 0.2.2 Source cves: CVE-2022-23577 Source advisory: OSV:PYSEC-2022-141...
nuclear-python (>=0.14.4.1, <=0.14.6.2) potentially affected by CVE-2022-23577 via tensorflow-gpu (1.13.2)
tensorflow-gpu PYPI version 1.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - nuclear-python =0.14.4.1, =0.14.6.2 Source cves: CVE-2022-23577 Source advisory: OSV:PYSEC-2022-141...
audeep (>=0.9.2, <=0.9.6a1), cryocare (>=0.0.1, <=0.0.2) +17 more potentially affected by CVE-2022-23577 via tensorflow-gpu (1.15.5)
tensorflow-gpu PYPI version 1.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - audeep =0.9.2, =0.0.1, =0.6.7a1, =0.2.5, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =1.3.0, =0.0.4, =0.1.3, =0.4.0, =0.0.6, =0.0.8 and more...
strawberryfields-gpu (>=0.7.3, <=0.10.0) potentially affected by CVE-2022-23577 via tensorflow-gpu (1.6.0)
tensorflow-gpu PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - strawberryfields-gpu =0.7.3, =0.10.0 Source cves: CVE-2022-23577 Source advisory: OSV:PYSEC-2022-141...
CVE-2022-23577 Null-dereference in Tensorflow
Tensorflow is an Open Source Machine Learning Framework. The implementation of GetInitOp is vulnerable to a crash caused by dereferencing a null pointer. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, ...
alwakeupword (1.0.0), armadillin (>=0.0.2, <=0.53.0) +33 more potentially affected by CVE-2022-23577 via tensorflow (>=2.6.0, <=2.6.2)
tensorflow PYPI version =2.6.0, =0.0.2, =1.0.1, =0.0.9, =0.2.0, =4.5.2, =1.1.2, =0.2.0, =0.0.1, =0.1.5, =1.0.3, =1.0.6 and more Source cves: CVE-2022-23577 Source advisory: MEND:CVE-2022-23577...
