Lucene search
+L

12107 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 2:39 p.m.33 views

Infinite loop in TFLite

Impact The strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition: cc for int i = 0; i params-ellipsismask // ... int ellipsisendidx = std::mini + 1 + numaddaxis +...

5.5CVSS5.9AI score0.00173EPSS
SaveExploits0References11Affected Software3
RedHat Linux
RedHat Linux
added 2021/08/24 1:06 p.m.8 views

python-pygments: Infinite loop in SML lexer may lead to DoS

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS7.4AI score0.02759EPSS
SaveExploits0References4
Check Point Advisories
Check Point Advisories
added 2021/08/23 12:00 a.m.46 views

Oracle E-Business Suite Sales Offline Denial of Service (CVE-2021-2189)

An infinite loop vulnerability exists in the Sales Offline component of Oracle E-Business Suite. The vulnerability is due to improper handling of requests by the authentication component of Sales Offline...

5CVSS8.3AI score0.147EPSS
SaveExploits0
Prion
Prion
added 2021/08/19 11:15 a.m.28 views

Design/Logic Flaw

An issue was discovered in tcppulloutofband in tcpin.c in HCC embedded InterNiche 4.0.1. The TCP out-of-band urgent-data processing function invokes a panic function if the pointer to the end of the out-of-band data points outside of the TCP segment's data. If the panic function hadn't a trap...

5CVSS8.5AI score0.01493EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
added 2021/08/18 5:55 p.m.10 views

Denial Of Service (DoS)

Exiv2 is vulnerable to denial of service. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if th...

5.5CVSS6.4AI score0.01051EPSS
SaveExploits0References8Affected Software2
Veracode
Veracode
added 2021/08/18 5:55 p.m.11 views

Denial Of Service (DoS)

Exiv2 is vulnerable to denial of service. An infinite loop can be triggered when modifying the metadata of a malicious image file...

5.5CVSS6.4AI score0.01109EPSS
SaveExploits0References9Affected Software3
RedHat Linux
RedHat Linux
added 2021/08/18 9:13 a.m.8 views

CXF: Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter

A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely. This issue affects Apache CXF versions prior to 3.4.4; Apache CXF versions prior ...

7.5CVSS7.2AI score0.07024EPSS
SaveExploits0References5
NVD
NVD
added 2021/08/12 10:15 p.m.34 views

CVE-2021-37686

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker ca...

5.5CVSS0.00173EPSS
SaveExploits0References2
OSV
OSV
added 2021/08/12 10:15 p.m.9 views

PYSEC-2021-308

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker ca...

5.5CVSS6.2AI score0.00173EPSS
SaveExploits0References2
OSV
OSV
added 2021/08/12 10:15 p.m.11 views

PYSEC-2021-797

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker ca...

5.5CVSS6.2AI score0.00173EPSS
SaveExploits0References2
PyPA
PyPA
added 2021/08/12 10:15 p.m.9 views

PYSEC-2021-308

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker ca...

5.5CVSS7AI score0.00173EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/08/12 10:15 p.m.5 views

CVE-2021-37686

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker ca...

5.5CVSS5.8AI score0.00173EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2021/08/12 10:15 p.m.12 views

PYSEC-2021-797

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker ca...

5.5CVSS7AI score0.00173EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 10:15 p.m.11 views

PYSEC-2021-599

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker ca...

5.5CVSS7AI score0.00173EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2021/08/12 9:55 p.m.77 views

CVE-2021-37686

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker ca...

5.5CVSS7AI score0.00173EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/08/12 9:55 p.m.51 views

CVE-2021-37686 Infinite loop in TensorFlow Lite

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker ca...

5.5CVSS6.1AI score0.00173EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2021/08/12 6:57 a.m.14 views

dotnet: ASP.NET Core WebSocket frame processing DoS

An infinite loop error was found in ASP.NET when processing WebSocket frames. The exploitation of this issue can cause high CPU resource consumption. The highest threat from this vulnerability is to system availability...

7.5CVSS5.7AI score0.03902EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2021/08/12 6:49 a.m.14 views

dotnet: ASP.NET Core WebSocket frame processing DoS

An infinite loop error was found in ASP.NET when processing WebSocket frames. The exploitation of this issue can cause high CPU resource consumption. The highest threat from this vulnerability is to system availability...

7.5CVSS5.7AI score0.03902EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2021/08/12 12:00 a.m.12 views

PT-2021-21805 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow version 2.6.0 Description: The strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker c...

9.3CVSS5.6AI score0.00447EPSS
SaveExploits5References91
RedHat Linux
RedHat Linux
added 2021/08/11 6:47 p.m.12 views

dotnet: ASP.NET Core WebSocket frame processing DoS

An infinite loop error was found in ASP.NET when processing WebSocket frames. The exploitation of this issue can cause high CPU resource consumption. The highest threat from this vulnerability is to system availability...

7.5CVSS5.7AI score0.03902EPSS
SaveExploits0References6
Rows per page
Query Builder