8079 matches found
GHSA-2XGJ-XHGF-GGJV Heap buffer overflow in `BandedTriangularSolve`
Impact An attacker can trigger a heap buffer overflow in Eigen implementation of tf.rawops.BandedTriangularSolve: python import tensorflow as tf import numpy as np matrixarray = np.array matrixtensor = tf.converttotensornp.reshapematrixarray,0,1,dtype=tf.float32 rhsarray = np.array1,1 rhstensor =...
GHSA-6QGM-FV6V-RFPV Overflow/denial of service in `tf.raw_ops.ReverseSequence`
Impact The implementation of tf.rawops.ReverseSequence allows for stack overflow and/or CHECK-fail based denial of service. python import tensorflow as tf input = tf.zeros1, 1, 1, dtype=tf.int32 seqlengths = tf.constant0, shape=1, dtype=tf.int32 tf.rawops.ReverseSequence input=input,...
GHSA-PH87-FVJR-V33W CHECK-fail in `tf.raw_ops.RFFT`
Impact An attacker can cause a denial of service by exploiting a CHECK-failure coming from the implementation of tf.rawops.RFFT: python import tensorflow as tf inputs = tf.constant1, shape=1, dtype=tf.float32 fftlength = tf.constant0, shape=1, dtype=tf.int32 tf.rawops.RFFTinput=inputs,...
GHSA-FXQH-CFJM-FP93 Division by 0 in `Reverse`
Impact An attacker can cause a denial of service via a FPE runtime error in tf.rawops.Reverse: python import tensorflow as tf tensorinput = tf.constant, shape=0, 1, 1, dtype=tf.int32 dims = tf.constantFalse, True, False, shape=3, dtype=tf.bool tf.rawops.Reversetensor=tensorinput, dims=dims This i...
Division by 0 in `Conv2DBackpropFilter`
Impact An attacker can trigger a division by 0 in tf.rawops.Conv2DBackpropFilter: python import tensorflow as tf inputtensor = tf.constant, shape=0, 0, 1, 0, dtype=tf.float32 filtersizes = tf.constant1, 1, 1, 1, shape=4, dtype=tf.int32 outbackprop = tf.constant, shape=0, 0, 1, 1, dtype=tf.float32...
GHSA-84MW-34W6-2Q43 Null pointer dereference via invalid Ragged Tensors
Impact Calling tf.rawops.RaggedTensorToVariant with arguments specifying an invalid ragged tensor results in a null pointer dereference: python import tensorflow as tf inputtensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float32 filtertensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float3...
What Is The Low Orbit Ion Cannon (LOIC)❓ Defend methods
For a tool that can cause serious damage to a website, LOIC is relatively simple. What it does basically is to send multiple requests and flood a targeted IP with TCP or UDP packets or HTTP requests. One person cannot single handedly use LOIC to cause DoS, so a number of users have to come togeth...
CVE-2021-32032
In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation in the event of a failure can prevent the abort operation in the associated cryptographic library from freeing internal resources, causing a memory leak...
CVE-2021-32032
In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation in the event of a failure can prevent the abort operation in the associated cryptographic library from freeing internal resources, causing a memory leak...
CVE-2021-32032
In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation in the event of a failure can prevent the abort operation in the associated cryptographic library from freeing internal resources, causing a memory leak...
Memory corruption
In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation in the event of a failure can prevent the abort operation in the associated cryptographic library from freeing internal resources, causing a memory leak...
CVE-2021-32032
Trusted Firmware-M (TF-M) up to version 1.3.0 is affected by CVE-2021-32032. The issue arises when cleaning up memory for a multi-part cryptographic operation after a failure: the abort() path in the cryptographic library may fail to free internal resources, causing a memory leak. The CVE entry n...
CVE-2021-32032
In Trusted Firmware-M through 1.3.0, cleaning up the memory allocated for a multi-part cryptographic operation in the event of a failure can prevent the abort operation in the associated cryptographic library from freeing internal resources, causing a memory leak...
PT-2021-19637
Name of the Vulnerable Software and Affected Versions: Trusted Firmware-M versions prior to 1.4 Description: The issue arises when cleaning up memory allocated for a multi-part cryptographic operation fails, preventing the abort operation in the associated cryptographic library from freeing...
Code injection
The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversary to extract the private ECC key...
CVE-2020-27209
The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversary to extract the private ECC key...
CVE-2021-28904
In function extgetplugin in libyang = v1.0.225, it doesn't check whether the value of revision is NULL. If revision is NULL, the operation of strcmprevision, extpluginsu.revision will lead to a crash...
CVE-2021-28902
In function readyincontainer in libyang extr is NULL. In some cases, it can be NULL, which leads to the operation of retval-extr-flags that results in a crash...
RHEL 8 : linux-firmware (RHSA-2021:1620)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1620 advisory. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: kernel: Integ...