Lucene search
+L

6018 matches found

Github Security Blog
Github Security Blog
•added 2021/11/10 6:44 p.m.•60 views

A use of uninitialized value vulnerability in Tensorflow

Impact TensorFlow's Grappler optimizer has a use of unitialized variable: cc const NodeDef dequeuenode; for const auto& trainnode : trainnodes if IsDequeueOptrainnode dequeuenode = trainnode; break; if dequeuenode ... If the trainnodes vector obtained from the saved model that gets optimized does...

7.8CVSS2.5AI score0.00196EPSS
SaveExploits1References7Affected Software3
CNVD
CNVD
•added 2021/11/09 12:00 a.m.•112 views

Google TensorFlow has an unspecified vulnerability (CNVD-2021-92554)

A security vulnerability in Google TensorFlow, an end-to-end open source platform for machine learning from Google, stems from the use of uninitialized variables in the Grappler optimizer. If the trainnodes vector obtained from the saved optimization model does not contain Dequeue nodes, then...

7.8CVSS2.8AI score0.00196EPSS
SaveExploits1References1
OSV
OSV
•added 2021/11/05 11:15 p.m.•28 views

CVE-2021-41225

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a use of unitialized variable. If the trainnodes vector obtained from the saved model that gets optimized does not contain a Dequeue node, then dequeuenode is left unitialized. The...

7.8CVSS7.6AI score
SaveExploits0References2
NVD
NVD
•added 2021/11/05 11:15 p.m.•44 views

CVE-2021-41225

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a use of unitialized variable. If the trainnodes vector obtained from the saved model that gets optimized does not contain a Dequeue node, then dequeuenode is left unitialized. The...

7.8CVSS0.00196EPSS
SaveExploits1References2
PyPA
PyPA
•added 2021/11/05 11:15 p.m.•16 views

PYSEC-2021-417

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a use of unitialized variable. If the trainnodes vector obtained from the saved model that gets optimized does not contain a Dequeue node, then dequeuenode is left unitialized. The...

7.8CVSS7AI score0.00196EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2021/11/05 11:15 p.m.•34 views

Stack overflow

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a use of unitialized variable. If the trainnodes vector obtained from the saved model that gets optimized does not contain a Dequeue node, then dequeuenode is left unitialized. The...

2.1CVSS7.5AI score0.00196EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2021/11/05 11:15 p.m.•21 views

PYSEC-2021-634

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a use of unitialized variable. If the trainnodes vector obtained from the saved model that gets optimized does not contain a Dequeue node, then dequeuenode is left unitialized. The...

7.8CVSS2.9AI score0.00196EPSS
SaveExploits1References2
OSV
OSV
•added 2021/11/05 11:15 p.m.•20 views

PYSEC-2021-832

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a use of unitialized variable. If the trainnodes vector obtained from the saved model that gets optimized does not contain a Dequeue node, then dequeuenode is left unitialized. The...

7.8CVSS5.9AI score0.00196EPSS
SaveExploits1References2
Mend
Mend
•added 2021/11/05 10:30 p.m.•2 views

CVE-2021-41225

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a use of unitialized variable. If the trainnodes vector obtained from the saved model that gets optimized does not contain a Dequeue node, then dequeuenode is left unitialized. The...

7.8CVSS0.00196EPSS
SaveExploits1References7
CVE
CVE
•added 2021/11/05 10:30 p.m.•109 views

CVE-2021-41225

CVE-2021-41225 affects TensorFlow’s Grappler optimizer: if train_nodes lacks a Dequeue node, dequeue_node remains uninitialized due to an uninitialized variable in the Grappler code. The documented fix is included in TensorFlow 2.7.0, with cherry-picks for 2.6.1, 2.5.2, and 2.4.4 (still in suppor...

7.8CVSS6.2AI score0.00196EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/11/05 10:30 p.m.•52 views

CVE-2021-41225 A use of uninitialized value vulnerability in Tensorflow

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a use of unitialized variable. If the trainnodes vector obtained from the saved model that gets optimized does not contain a Dequeue node, then dequeuenode is left unitialized. The...

5.5CVSS7.8AI score0.00196EPSS
SaveExploits1References2
NVD
NVD
•added 2021/11/05 9:15 p.m.•53 views

CVE-2021-41204

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS0.00141EPSS
SaveExploits0References2
OSV
OSV
•added 2021/11/05 9:15 p.m.•33 views

CVE-2021-41204

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS5.4AI score
SaveExploits0References2
PyPA
PyPA
•added 2021/11/05 9:15 p.m.•13 views

PYSEC-2021-812

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS6.9AI score0.00141EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/11/05 9:15 p.m.•13 views

PYSEC-2021-614

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS6.9AI score0.00141EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/11/05 9:15 p.m.•11 views

CVE-2021-41204

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS6AI score0.00141EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/11/05 9:15 p.m.•20 views

PYSEC-2021-614

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS2AI score0.00141EPSS
SaveExploits0References2
Prion
Prion
•added 2021/11/05 9:15 p.m.•32 views

Stack overflow

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

2.1CVSS5.5AI score0.00141EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/11/05 8:45 p.m.•50 views

CVE-2021-41204 Segfault while copying constant resource tensor

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS5.6AI score0.00141EPSS
SaveExploits0References2
Mend
Mend
•added 2021/11/05 8:45 p.m.•2 views

CVE-2021-41204

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

6.8CVSS0.00141EPSS
SaveExploits0References7
Rows per page
Query Builder