TensorFlow has Floating Point Exception in TensorListSplit with XLA

...

[SECURITY] Fedora 40 Update: octave-8.4.0-6.fc40

GNU Octave is a high-level language, primarily intended for numerical computations. It provides a convenient command line interface for solving linear and nonlinear problems numerically, and for performing other numerical experiments using a language that is mostly compatible with Matlab. It may...

BIT-MOODLE-2023-28332 Moodle: algebra filter xss when filter is misconfigured

If the algebra filter was enabled but not functional eg the necessary binaries were missing from the server, it presented an XSS risk...

Enough Polynomials and Linear Algebra to Implement Kyber

I was once talking with a mathematician and trying to explain elliptic curve cryptography. Eventually, something clicked and they went "oh, that! I think there was a chapter about it in the book. You made a whole field out of it?" Yes, in cryptography we end up focusing on a very narrow slice of...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a floating point exception in TensorListSplit with XLA. PoC import tensorflow as tf func = tf.rawops.TensorListSplit para = 'tensor': 1, 'elementshape': -1, 'lengths': 0 @tf.functionjitcompile=True def...

AZL-35321 CVE-2023-25676 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, tf.rawops.ParallelConcat segfaults with a nullptr dereference when given a parameter shape with rank that is not greater than zero. A fix is available in TensorFlow 2.12.0 and 2.11.1...

AZL-35318 CVE-2023-25673 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

AZL-31213 CVE-2023-25673 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

CVE-2023-25673

TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

CVE-2023-25674

TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error in RandomShuffle with XLA enabled. A fix is included in TensorFlow 2.12.0 and 2.11.1...

CVE-2023-25676

TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, tf.rawops.ParallelConcat segfaults with a nullptr dereference when given a parameter shape with rank that is not greater than zero. A fix is available in TensorFlow 2.12.0 and 2.11.1...

GHSA-GF97-Q72M-7579 TensorFlow has Null Pointer Error in RandomShuffle with XLA enable

Impact NPE in RandomShuffle with XLA enable python import tensorflow as tf func = tf.rawops.RandomShuffle para = 'value': 1e+20, 'seed': -4294967297, 'seed2': -2147483649 @tf.functionjitcompile=True def test: y = funcpara return y test Patches We have patched the issue in GitHub commit...

GHSA-9F45-9QRW-PP4V Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional

If the algebra filter was enabled but not functional eg the necessary binaries were missing from the server, it presented an XSS risk...

Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional

If the algebra filter was enabled but not functional eg the necessary binaries were missing from the server, it presented an XSS risk...

CVE-2023-28332

If the algebra filter was enabled but not functional eg the necessary binaries were missing from the server, it presented an XSS risk...

CVE-2023-28332

If the algebra filter was enabled but not functional eg the necessary binaries were missing from the server, it presented an XSS risk...

Design/Logic Flaw

If the algebra filter was enabled but not functional eg the necessary binaries were missing from the server, it presented an XSS risk...

CVE-2023-28332

If the algebra filter was enabled but not functional eg the necessary binaries were missing from the server, it presented an XSS risk...

UBUNTU-CVE-2023-28332

If the algebra filter was enabled but not functional eg the necessary binaries were missing from the server, it presented an XSS risk...

CVE-2023-28332

CVE-2023-28332 affects Moodle when the algebra filter is enabled but non-functional (e.g., missing binaries). The vulnerability exposes an XSS risk due to the misconfiguration and/or insufficient sanitization, as documented across OSV BIT-MOODLE-2023-28332 and Nessus entries. Affected versions ci...