Lucene search
+L

9208 matches found

Prion
Prion
added 2020/05/04 3:15 p.m.27 views

Integer overflow

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

4.3CVSS6.5AI score0.00569EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2020/05/04 3:15 p.m.10 views

PYSEC-2020-304

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

6.5CVSS7.1AI score0.00569EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2020/05/04 3:15 p.m.26 views

PYSEC-2020-253

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

6.5CVSS4.2AI score0.00569EPSS
SaveExploits0References3
CVE
CVE
added 2020/05/04 2:12 p.m.88 views

CVE-2018-21233

TensorFlow

6.5CVSS6.4AI score0.00569EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/05/04 2:12 p.m.36 views

CVE-2018-21233

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

6.5AI score0.00569EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2020/03/01 6:2 p.m.27 views

Security Bulletin: A security vulnerability has been identified in TensorFlow shipped with PowerAI.

Summary Vulnerability CVE-2020-5215 found in TensorFlow package. Vulnerability Details CVEID: CVE-2020-5215 DESCRIPTION: Tensorflow is vulnerable to a denial of service, caused by a flaw when converting a string from Python to a tf.float16 value. By sending a specially-crafted string, a remote...

7.5CVSS0.1AI score0.00588EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2020/02/12 12:0 a.m.25 views

Google TensorFlow Code Issues Vulnerabilities

TensorFlow is an end-to-end open source platform for machine learning. A code issue vulnerability exists in Google TensorFlow. The vulnerability stems from a networked system or product that does not properly validate incoming data. No details of the vulnerability are provided at this time...

7.5CVSS7AI score0.00588EPSS
SaveExploits1References1
Veracode
Veracode
added 2020/01/29 5:37 a.m.21 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS. The vulnerability exists due to the lack of checks during conversion of a string in eager mode from Python to a tf.float16 value...

7.5CVSS4.5AI score0.00588EPSS
SaveExploits1References5Affected Software3
OSV
OSV
added 2020/01/28 10:15 p.m.22 views

CVE-2020-5215

In TensorFlow before 1.15.2 and 2.0.1, converting a string from Python to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode. This issue can lead to denial of service in inference/training where a malicious attacker c...

7.5CVSS6.5AI score
SaveExploits0References4
NVD
NVD
added 2020/01/28 10:15 p.m.44 views

CVE-2020-5215

In TensorFlow before 1.15.2 and 2.0.1, converting a string from Python to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode. This issue can lead to denial of service in inference/training where a malicious attacker c...

7.5CVSS5.7AI score0.00588EPSS
SaveExploits1References4
OSV
OSV
added 2020/01/28 10:15 p.m.21 views

PYSEC-2020-303

In TensorFlow before 1.15.2 and 2.0.1, converting a string from Python to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode. This issue can lead to denial of service in inference/training where a malicious attacker c...

7.5CVSS2.8AI score0.00588EPSS
SaveExploits1References4
OSV
OSV
added 2020/01/28 10:15 p.m.5 views

PYSEC-2020-338

In TensorFlow before 1.15.2 and 2.0.1, converting a string from Python to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode. This issue can lead to denial of service in inference/training where a malicious attacker c...

7.5CVSS6.1AI score0.00588EPSS
SaveExploits1References4
Prion
Prion
added 2020/01/28 10:15 p.m.27 views

Format string

In TensorFlow before 1.15.2 and 2.0.1, converting a string from Python to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode. This issue can lead to denial of service in inference/training where a malicious attacker c...

4.3CVSS7.3AI score0.00588EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2020/01/28 10:15 p.m.10 views

PYSEC-2020-258

In TensorFlow before 1.15.2 and 2.0.1, converting a string from Python to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode. This issue can lead to denial of service in inference/training where a malicious attacker c...

7.5CVSS6.1AI score0.00588EPSS
SaveExploits1References4
PyPA
PyPA
added 2020/01/28 10:15 p.m.9 views

PYSEC-2020-338

In TensorFlow before 1.15.2 and 2.0.1, converting a string from Python to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode. This issue can lead to denial of service in inference/training where a malicious attacker c...

7.5CVSS6.8AI score0.00588EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2020/01/28 10:15 p.m.9 views

PYSEC-2020-258

In TensorFlow before 1.15.2 and 2.0.1, converting a string from Python to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode. This issue can lead to denial of service in inference/training where a malicious attacker c...

7.5CVSS6.8AI score0.00588EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2020/01/28 9:32 p.m.120 views

Segmentation faultin TensorFlow when converting a Python string to `tf.float16`

Impact Converting a string from Python to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode. This issue can lead to denial of service in inference/training where a malicious attacker can send a data point which...

7.5CVSS1.2AI score0.00588EPSS
SaveExploits1References9Affected Software3
OSV
OSV
added 2020/01/28 9:32 p.m.3 views

GHSA-977J-XJ7Q-2JR9 Segmentation faultin TensorFlow when converting a Python string to `tf.float16`

Impact Converting a string from Python to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode. This issue can lead to denial of service in inference/training where a malicious attacker can send a data point which...

5CVSS6.2AI score0.00588EPSS
SaveExploits1References9
CVE
CVE
added 2020/01/28 9:20 p.m.159 views

CVE-2020-5215

CVE-2020-5215 affects TensorFlow before 1.15.2 and 2.0.1, where converting a Python string to tf.float16 in eager mode can trigger a segmentation fault. The issue arises because format checks for this use case exist only in graph mode, potentially enabling denial of service during inference/train...

7.5CVSS5.8AI score0.00588EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2020/01/28 9:20 p.m.40 views

CVE-2020-5215 Segmentation faultin TensorFlow when converting a Python string to tf.float16

In TensorFlow before 1.15.2 and 2.0.1, converting a string from Python to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode. This issue can lead to denial of service in inference/training where a malicious attacker c...

5CVSS7.3AI score0.00588EPSS
SaveExploits1References4
Rows per page
Query Builder