Mageia: Security Advisory (MGASA-2021-0550)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated speex packages fix security vulnerability

Fixed zero division error in readsamples bsc1192580. CVE-2020-23903...

MGASA-2021-0550 Updated speex packages fix security vulnerability

Fixed zero division error in readsamples bsc1192580. CVE-2020-23903...

openSUSE: Security Advisory for speex (openSUSE-SU-2021:1538-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:1538-1 Security update for speex

This update for speex fixes the following issues: - CVE-2020-23903: Fixed zero division error in readsamples bsc1192580. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2021:3860-1 Security update for speex

This update for speex fixes the following issues: - CVE-2020-23903: Fixed zero division error in readsamples bsc1192580...

SUSE-SU-2021:3860-1 Security update for speex

This update for speex fixes the following issues: - CVE-2020-23903: Fixed zero division error in readsamples bsc1192580...

SUSE-SU-2021:3858-1 Security update for speex

This update for speex fixes the following issues: - CVE-2020-23903: Fixed zero division error in readsamples bsc1192580...

Security update for speex (moderate)

openSUSE Security Update: Security update for speex Announcement ID: openSUSE-SU-2021:3860-1 Rating: moderate References: 1192580 Cross-References: CVE-2020-23903 CVSS scores: CVE-2020-23903 SUSE: 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 An update tha...

PYSEC-2021-410

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for AllToAll can be made to execute a division by 0. This occurs whenever the splitcount argument is 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on...

PYSEC-2021-410

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for AllToAll can be made to execute a division by 0. This occurs whenever the splitcount argument is 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on...

The vulnerabilities of the `alloc_large()` and `alloc_sarray()` functions in the libjpeg-turbo image processing library allow a malicious actor to perform division operations with zero.

The vulnerability of the alloclarge and allocsarray functions in the libjpeg-turbo image processing library is related to deficiencies in the handling of input values. Exploiting this vulnerability could allow a malicious actor to trigger a zero-division operation remotely...

PYSEC-2021-794

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of division in TFLite is vulnerable to a division by 0 error. There is no check that the divisor tensor does not contain zero elements. We have patched the issue in GitHub commit...

PT-2021-21811 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: An attacker can craft a TFLite model that would trigger a division by zero error...

The vulnerability of the coders/jp2.c file, a program set for reading and editing ImageMagisk files, stems from the lack of zero-division checking. This allows an attacker to trigger a service failure.

The vulnerability of the coders/jp2.c file, a program set for reading and editing ImageMagisk files, is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the gem.c file, a program for reading and editing ImageMagisk files, relates to the lack of zero-division checking. This allows an attacker to trigger a service failure.

The vulnerability of the gem.c file, a program for reading and editing ImageMagisk files, is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker to cause service interruptions...

GHSA-PMPR-55FJ-R229 Division by zero in TFLite's implementation of `SVDF`

Impact The implementation of the SVDF TFLite operator is vulnerable to a division by zero error: cc const int rank = params-rank; ... TFLITEENSUREEQcontext, numfilters % rank, 0; An attacker can craft a model such that params-rank would be 0. Patches We have patched the issue in GitHub commit...

PYSEC-2021-713

TensorFlow is an end-to-end open source platform for machine learning. The Prepare step of the SpaceToDepth TFLite operator does not check for 0 before divisionhttps://github.com/tensorflow/tensorflow/blob/5f7975d09eac0f10ed8a17dbb6f5964977725adc/tensorflow/lite/kernels/spacetodepth.ccL63-L67. An...

CVE-2021-29549

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a runtime division by zero error and denial of service in tf.rawops.QuantizedBatchNormWithGlobalNormalization. This is because the...

PYSEC-2021-235

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the SVDF TFLite operator is vulnerable to a division by zero errorhttps://github.com/tensorflow/tensorflow/blob/7f283ff806b2031f407db64c4d3edcda8fb9f9f5/tensorflow/lite/kernels/svdf.ccL99-L102. An attacke...