4528 matches found
Heap buffer overflow due to incorrect hash function in TensorFlow
Impact The TensorKey hash function used total estimated AllocatedBytes, which a is an estimate per tensor, and b is a very poor hash function for constants e.g. int32t. It also tried to access individual tensor bytes through tensor.data of size AllocatedBytes. This led to ASAN failures because th...
GHSA-2VV3-56QG-G2CF Missing validation causes denial of service via `LSTMBlockCell`
Impact The implementation of tf.rawops.LSTMBlockCell does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf tf.rawops.LSTMBlockCell x=tf.constant0.837607, shape=28,29, dtype=tf.float32,...
CVE-2022-29210
TensorFlow is an open source platform for machine learning. In version 2.8.0, the TensorKey hash function used total estimated AllocatedBytes, which a is an estimate per tensor, and b is a very poor hash function for constants e.g. int32t. It also tried to access individual tensor bytes through...
CVE-2022-29210
TensorFlow is an open source platform for machine learning. In version 2.8.0, the "TensorKey" hash function used total estimated "AllocatedBytes", which a is an estimate per tensor, and b is a very poor hash function for constants e.g. "int32t". It also tried to access individual tensor bytes...
CVE-2022-29200 Missing validation causes denial of service in TensorFlow via `LSTMBlockCell`
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of tf.rawops.LSTMBlockCell does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack. The cod...
PT-2022-19466
Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.9.0 TensorFlow versions prior to 2.8.1 TensorFlow versions prior to 2.7.2 TensorFlow versions prior to 2.6.4 Description The issue is related to the lack of input validation in the tf.compat.v1.signal.rfft2d and...
May 19, 2022—KB5015019 (OS Build 14393.5127) Out-of-band
None None...
May 19, 2022—KB5015013 (OS Build 20348.709) Out-of-band
None None...
KB5014991: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012
KB5014991: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a server o...
KB5014990: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2008 SP2
KB5014990: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2008 SP2 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a serv...
KB5014986: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 R2
KB5014986: Authentication failures occur after the May 10, 2022 update is installed on domain controllers running Windows Server 2012 R2 Summary This update includes improvements for the following issue: Addresses a known issue that might cause authentication failures for some services on a serve...
The vulnerability of the ClamAV antivirus software library and the Cisco AMP security tool for end devices allows a hacker to trigger a service failure.
The vulnerability of the ClamAV antivirus software library and the Cisco AMP security tool for end devices is related to the handling of an unreliable pointer. Exploiting this vulnerability can allow a attacker to cause service failures...
The vulnerability of the ClamAV antivirus software library and the Cisco AMP security tool for end devices allows a perpetrator to trigger a service failure.
The vulnerability of the ClamAV antivirus software library and the Cisco AMP security tool for end devices is related to memory release errors during HTML file syntax analysis. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of the Apache Tomcat application server arises from insufficient validation of input data, allowing attackers to trigger service failures.
The vulnerability of the Apache Tomcat application server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially crafted package...
GHSA-WF9G-RH76-6JVR Incorrect Permission Assignment for Critical Resource in Jenkins
In Jenkins before versions 2.44, 2.32.2 low privilege users were able to override JDK download credentials SECURITY-392, resulting in future builds possibly failing to download a JDK...
The vulnerability of the malware analysis process in Cisco Firepower Threat Defense software allows a perpetrator to trigger a service failure.
The vulnerability of the malware analysis process in Cisco Firepower Threat Defense software is related to insufficient resource control during its operation. Exploiting this vulnerability allows a remote attacker to cause service failures...
CISA Temporarily Removes CVE-2022-26925 from Known Exploited Vulnerability Catalog
CISA is temporarily removing CVE-2022-26925 from its Known Exploited Vulnerability Catalog due to a risk of authentication failures when the May 10, 2022 Microsoft rollup update is applied to domain controllers. After installing May 10, 2022 rollup update on domain controllers, organizations migh...
May 10, 2022—KB5014001 (Security-only update)
None None...