Lucene search
+L

9207 matches found

Github Security Blog
Github Security Blog
added 2019/04/30 3:36 p.m.39 views

Integer Overflow or Wraparound in Google TensorFlow

Issue Description Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent. The block size in meta file might contain a large int64 value which causes an integer overflow upon addition. Subsequent code using n as index may...

9.8CVSS9.1AI score0.00614EPSS
SaveExploits0References7Affected Software2
OSV
OSV
added 2019/04/30 3:36 p.m.2 views

GHSA-MW6V-CRH8-8533 Integer Overflow or Wraparound in Google TensorFlow

Issue Description Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent. The block size in meta file might contain a large int64 value which causes an integer overflow upon addition. Subsequent code using n as index may...

9.8CVSS7.2AI score0.00614EPSS
SaveExploits0References8
Veracode
Veracode
added 2019/04/25 6:47 a.m.13 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. An integer overflow could occurs when parsing a malicious meta checkpoint, resulting in an out of bounds read...

9.8CVSS9AI score0.00614EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2019/04/24 9:29 p.m.7 views

PYSEC-2019-205

Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent...

9.8CVSS6.9AI score0.00614EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2019/04/24 9:29 p.m.8 views

PYSEC-2019-223

Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent...

9.8CVSS6.9AI score0.00614EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/04/24 9:29 p.m.44 views

PYSEC-2019-230

Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent...

9.8CVSS3.5AI score0.00614EPSS
SaveExploits0References2
NVD
NVD
added 2019/04/24 9:29 p.m.26 views

CVE-2018-7575

Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent...

9.8CVSS9.5AI score0.00614EPSS
SaveExploits0References1
Prion
Prion
added 2019/04/24 9:29 p.m.21 views

Buffer overflow

Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent...

7.5CVSS9.4AI score0.00614EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/04/24 9:29 p.m.44 views

PYSEC-2019-205

Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent...

9.8CVSS7.2AI score0.00614EPSS
SaveExploits0References2
OSV
OSV
added 2019/04/24 9:29 p.m.21 views

CVE-2018-7575

Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent...

9.8CVSS9.5AI score
SaveExploits0References1
PyPA
PyPA
added 2019/04/24 9:29 p.m.7 views

PYSEC-2019-230

Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent...

9.8CVSS6.9AI score0.00614EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2019/04/24 9:29 p.m.42 views

PYSEC-2019-223

Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent...

9.8CVSS3.5AI score0.00614EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/04/24 8:44 p.m.30 views

CVE-2018-7575

Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent...

9.5AI score0.00614EPSS
SaveExploits0References1
CVE
CVE
added 2019/04/24 8:44 p.m.100 views

CVE-2018-7575

CVE-2018-7575 affects Google TensorFlow 1.7.x and earlier. Connected sources describe a buffer/integer overflow in parsing a malicious meta checkpoint: the block size in a meta file may contain a large int64 value, causing an overflow when added and potentially leading to an out-of-bounds read in...

9.8CVSS9.3AI score0.00614EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2019/04/24 5:29 p.m.9 views

PYSEC-2019-207

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS6.8AI score0.00517EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2019/04/24 5:29 p.m.23 views

CVE-2019-9635

NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file...

6.5CVSS6.3AI score0.00476EPSS
SaveExploits0References1
PyPA
PyPA
added 2019/04/24 5:29 p.m.8 views

PYSEC-2019-228

NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file...

6.5CVSS6.7AI score0.00476EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/04/24 5:29 p.m.64 views

PYSEC-2019-225

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS2.5AI score0.00517EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/24 5:29 p.m.47 views

PYSEC-2019-222

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

8.1CVSS2.3AI score0.00531EPSS
SaveExploits0References1
OSV
OSV
added 2019/04/24 5:29 p.m.41 views

PYSEC-2019-235

NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file...

6.5CVSS3.7AI score0.00476EPSS
SaveExploits0References2
Rows per page
Query Builder