Lucene search
+L

5031 matches found

PyPA
PyPA
added 2022/02/04 11:15 p.m.9 views

PYSEC-2022-153

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow can trigger a null pointer dereference. There are 2 places where this can occur, for the same malicious alteration of a SavedModel file fixing the first one would trigger the same...

6.5CVSS7AI score0.01097EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/02/04 11:15 p.m.11 views

PYSEC-2022-134

Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is guarded by a DCHECK. However, DCHECK is a no-op in production builds...

6.5CVSS6.1AI score0.00992EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2022/02/04 10:32 p.m.10 views

CVE-2022-23570 Null-dereference in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is guarded by a DCHECK. However, DCHECK is a no-op in production builds...

6.5CVSS6.5AI score0.00992EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/04 10:32 p.m.33 views

CVE-2022-23570 Null-dereference in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is guarded by a DCHECK. However, DCHECK is a no-op in production builds...

6.5CVSS6.4AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2022/02/04 10:32 p.m.15 views

CVE-2022-23570

Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is guarded by a DCHECK. However, DCHECK is a no-op in production builds...

6.5CVSS6.9AI score0.00992EPSS
SaveExploits1
Cvelist
Cvelist
added 2022/02/04 10:32 p.m.46 views

CVE-2022-23570 Null-dereference in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is guarded by a DCHECK. However, DCHECK is a no-op in production builds...

6.5CVSS6.7AI score0.00992EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/02/04 10:32 p.m.40 views

CVE-2022-23577 Null-dereference in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The implementation of GetInitOp is vulnerable to a crash caused by dereferencing a null pointer. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, ...

6.5CVSS6.6AI score0.00783EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/02/04 12:00 a.m.5 views

PT-2022-16087 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.0 through 2.7.1 TensorFlow versions 2.6.0 through 2.6.3 Description: When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable argumen...

7.1CVSS6.2AI score0.00992EPSS
SaveExploits1References12
PyPA
PyPA
added 2022/02/03 12:15 p.m.9 views

PYSEC-2022-60

Tensorflow is an Open Source Machine Learning Framework. The implementation of SparseTensorSliceDataset has an undefined behavior: under certain condition it can be made to dereference a nullptr value. The 3 input arguments to SparseTensorSliceDataset represent a sparse tensor. However, there are...

7.6CVSS6.9AI score0.00746EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/02/03 12:15 p.m.8 views

PYSEC-2022-115

Tensorflow is an Open Source Machine Learning Framework. The implementation of SparseTensorSliceDataset has an undefined behavior: under certain condition it can be made to dereference a nullptr value. The 3 input arguments to SparseTensorSliceDataset represent a sparse tensor. However, there are...

7.6CVSS5.9AI score0.00746EPSS
SaveExploits1References3
PyPA
PyPA
added 2022/02/03 12:15 p.m.11 views

PYSEC-2022-115

Tensorflow is an Open Source Machine Learning Framework. The implementation of SparseTensorSliceDataset has an undefined behavior: under certain condition it can be made to dereference a nullptr value. The 3 input arguments to SparseTensorSliceDataset represent a sparse tensor. However, there are...

7.6CVSS6.9AI score0.00746EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.27 views

Mageia: Security Advisory (MGASA-2014-0536)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.5CVSS6.8AI score0.04968EPSS
SaveExploits0References4
Amazon
Amazon
added 2022/01/28 12:00 a.m.23 views

Important: kernel

Issue Overview: In the Linux kernel 5.3.10, there is a use-after-free read in the perftracelockacquire function related to include/trace/events/lock.h. CVE-2019-19769 A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem. This flaw occurs while importing the Commercial...

7.1CVSS6.3AI score0.03097EPSS
SaveExploits1
Amazon
Amazon
added 2022/01/28 12:00 a.m.10 views

Medium: kernel

Issue Overview: A flaw was found in the Linux kernel's implementation of wireless drivers using the Atheros chipsets. An attacker within wireless range could send crafted traffic leading to information disclosure. CVE-2020-3702 A flaw was found in the KVM's AMD code for supporting SVM nested...

8.8CVSS6.3AI score0.00658EPSS
SaveExploits3
ATTACKERKB
ATTACKERKB
added 2022/01/25 2:15 p.m.23 views

CVE-2022-23035

Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time...

4.7CVSS5.8AI score0.00352EPSS
SaveExploits0References7
OSV
OSV
added 2022/01/25 2:15 p.m.7 views

ALPINE-CVE-2022-23035

Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time...

4.6CVSS6.8AI score0.00352EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/25 2:15 p.m.3 views

DEBIAN-CVE-2022-23035

Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time...

4.6CVSS5.8AI score0.00352EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/25 2:15 p.m.7 views

UBUNTU-CVE-2022-23035

Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time...

4.6CVSS7AI score0.00352EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/01/25 12:15 p.m.15 views

CVE-2021-45340

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

6.5CVSS5.8AI score0.00922EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/24 12:00 a.m.8 views

OSV-2022-80 Null-dereference READ in gstate_clone_core

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43989 Crash type: Null-dereference READ Crash state: gstateclonecore gsgsave gsoutputpage...

7.2AI score
SaveExploits0References1
Rows per page
Query Builder