CVE-2021-37692

TensorFlow is an end-to-end open source platform for machine learning. In affected versions under certain conditions, Go code can trigger a segfault in string deallocation. For string tensors, "C.TFTStringDealloc" is called during garbage collection within a finalizer function. However, tensor...

CVE-2021-37677

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the shape inference code for "tf.rawops.Dequantize" has a vulnerability that could trigger a denial of service via a segfault if an attacker provides invalid arguments. The shape inference "implementation"...

PYSEC-2021-272

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for tf.rawops.ExperimentalDatasetToTFRecord and tf.rawops.DatasetToTFRecord can trigger heap buffer overflow and segmentation fault. The implementation assumes that all records in the...

CVE-2021-37650 Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for tf.rawops.ExperimentalDatasetToTFRecord and tf.rawops.DatasetToTFRecord can trigger heap buffer overflow and segmentation fault. The implementation assumes that all records in the...

CVE-2021-37692: Improper Input Validation

TensorFlow is an end-to-end open source platform for machine learning. In affected versions under certain conditions, Go code can trigger a segfault in string deallocation. For string tensors, C.TFTStringDealloc is called during garbage collection within a finalizer function. However, tensor...

CVE-2021-37690: Use After Free

TensorFlow is an end-to-end open source platform for machine learning. In affected versions when running shape functions, some functions such as MutableHashTableShape produce extra output information in the form of a ShapeAndType struct. The shapes embedded in this struct are owned by an inferenc...

CVE-2021-37677: Improper Input Validation

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the shape inference code for tf.rawops.Dequantize has a vulnerability that could trigger a denial of service via a segfault if an attacker provides invalid arguments. The shape inference implementation use...

PT-2021-21795 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: The shape inference code for tf.raw ops.Dequantize has a vulnerability that coul...

PT-2021-21812 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow version 2.5.1 Description: TensorFlow is an end-to-end open source platform for machine learning. In affected versions, under certain conditions, Go code can trigger a segfault in string...

nats:fuzz_conf: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5066885157748736 Project: nats Fuzzing Engine: libFuzzer Fuzz Target: fuzzconf Job Type: libfuzzerasannats Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

boost:boost_regex_fuzzer: Segv on unknown address in boost::re_detail_500::basic_regex_creator<char, boost::regex_traits<char, boost:

Project: https://github.com/boostorg/boost.git Detailed Report: https://oss-fuzz.com/testcase?key=6105427325616128 Project: boost Fuzzing Engine: libFuzzer Fuzz Target: boostregexfuzzer Job Type: libfuzzerasanboost Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

OPENSUSE-SU-2021:1071-1 Security update for caribou

This update for caribou fixes the following issues: Security issue fixed: - CVE-2021-3567: Fixed a segfault when attempting to use shifted characters bsc1186617. This update was imported from the SUSE:SLE-15-SP2:Update update project...

Security update for caribou (important)

openSUSE Security Update: Security update for caribou Announcement ID: openSUSE-SU-2021:1071-1 Rating: important References: 1186617 1187112 Cross-References: CVE-2021-3567 CVSS scores: CVE-2021-3567 SUSE: 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An...

OPENSUSE-SU-2021:2414-1 Security update for caribou

This update for caribou fixes the following issues: Security issue fixed: - CVE-2021-3567: Fixed a segfault when attempting to use shifted characters bsc1186617...

SUSE-SU-2021:2414-1 Security update for caribou

This update for caribou fixes the following issues: Security issue fixed: - CVE-2021-3567: Fixed a segfault when attempting to use shifted characters bsc1186617...

OPENSUSE-SU-2021:1897-1 Security update for libX11

This update for libX11 fixes the following issues: - Regression in the fix for CVE-2021-31535, causing segfaults for xforms applications like fdesign bsc1186643...

go-coredns:fuzz_plugin_cache: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5328499597508608 Project: go-coredns Fuzzing Engine: libFuzzer Fuzz Target: fuzzplugincache Job Type: libfuzzerasango-coredns Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

gonids:fuzz_parserule: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6522837123858432 Project: gonids Fuzzing Engine: libFuzzer Fuzz Target: fuzzparserule Job Type: libfuzzerasangonids Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

SUSE-SU-2021:2180-1 Security update for libsolv

This update for libsolv fixes the following issues: Security issues fixed: - CVE-2019-20387: Fixed heap-buffer-overflow in repodataschema2id bsc1161510 - CVE-2021-3200: testcaseread: error out if repos are added or the system is changed too late bsc1186229 Other issues fixed: - backport support f...

SUSE-SU-2021:2145-1 Security update for libsolv

This update for libsolv fixes the following issues: Security issues fixed: - CVE-2019-20387: Fixed heap-buffer-overflow in repodataschema2id bsc1161510 - CVE-2021-3200: testcaseread: error out if repos are added or the system is changed too late bsc1186229 Other issues fixed: - backport support f...