PYSEC-2021-816

TensorFlow is an open source platform for machine learning. In affected versions the implementations for convolution operators trigger a division by 0 if passed empty filter tensor arguments. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1,...

PYSEC-2021-814

TensorFlow is an open source platform for machine learning. In affected versions the implementation of ParallelConcat misses some input validation and can produce a division by 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow...

PYSEC-2021-399

TensorFlow is an open source platform for machine learning. In affected versions the implementation of ParallelConcat misses some input validation and can produce a division by 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow...

PYSEC-2021-401

TensorFlow is an open source platform for machine learning. In affected versions the implementations for convolution operators trigger a division by 0 if passed empty filter tensor arguments. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1,...

PYSEC-2021-814

TensorFlow is an open source platform for machine learning. In affected versions the implementation of ParallelConcat misses some input validation and can produce a division by 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow...

CVE-2021-41218

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for AllToAll can be made to execute a division by 0. This occurs whenever the splitcount argument is 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on...

CVE-2021-41207

TensorFlow is an open source platform for machine learning. In affected versions the implementation of ParallelConcat misses some input validation and can produce a division by 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow...

CVE-2021-41209

TensorFlow is an open source platform for machine learning. In affected versions the implementations for convolution operators trigger a division by 0 if passed empty filter tensor arguments. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1,...

PT-2021-23191 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier Description: TensorFlow is an open source platform for machine learning. In affected versions...

PT-2021-23179 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier Description: The implementation of ParallelConcat in TensorFlow misses some input validation...

Google TensorFlow 数字错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A numeric error vulnerability exists in Google TensorFlow versions prior to 2.7.0, which stems from the implementation of the convolution operator triggering division by 0 when TensorFlow is...

Google TensorFlow 数字错误漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A numeric error vulnerability exists in versions of Google TensorFlow prior to 2.7.0, which stems from the fact that AllToAll in TensorFlow performs division by zero when inferring code. No details of t...

The vulnerability of the WaveImage() function in the MagickCore/visual-effects.c component of the ImageMagick console graphics editor allows a attacker to cause a service failure due to insufficient checking of division by zero.

The vulnerability of the WaveImage function in the MagickCore/visual-effects.c component of the ImageMagick console graphics editor is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure through the use of a...

The vulnerability of the MagickCore/resize.c component of the console-based image editing tool ImageMagick, which stems from the lack of checks for division by zero, allows a hacker to trigger a service failure.

The vulnerability of the MagickCore/resize.c component in the console-based image editing tool ImageMagick is related to the lack of checks for division by zero. Exploiting this vulnerability can allow a remote attacker to cause a service failure using a specially created file...

CLSA-2021-1635459194 Fix CVE(s): CVE-2021-20313, CVE-2021-20312, CVE-2021-20311, CVE-2020-27766, CVE-2021-20176, CVE-2021-, CVE-2021-20309, CVE-2021-20241, CVE-2021-20243, CVE-2021-20244, CVE-2021-20246

SECURITY UPDATE: undefined behavior - debian/patches/CVE-2020-27766.patch: fix undefined behavior in the form of values outside the range of 'unsigned long' type. - CVE-2020-27766 SECURITY UPDATE: division by zero - debian/patches/CVE-2021-.patch: fix potential division by zero in many places. -...

openSUSE 15 Security Update : ffmpeg (openSUSE-SU-2021:3521-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3521-1 advisory. - CVE-2021-3566: Fixed information leak bsc1189166. - CVE-2021-38093: Fixed integer overflow vulnerability in filterrobert bsc1190734 -...

The vulnerability of the oss_write component of the hardware emulation software based on QEMU, which stems from the lack of protection against division by zero, allows a malicious actor to trigger a service failure.

The vulnerability of the osswrite component of the QEMU hardware emulation software is related to the lack of protection against division by zero. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the coders/webp.c component in the console-based image editing tool ImageMagick, which stems from the lack of checks for division by zero, allows a hacker to trigger a service failure.

The vulnerability of the coders/webp.c component in the console-based image editing tool ImageMagick is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

UVI-2021-1001762 nexthop: Fix division by zero while replacing a resilient group

nexthop: Fix division by zero while replacing a resilient group This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

Setting Factory.auctionDecrement to zero causes Denial of Service in Auction.settleAuction()

Handle pants Vulnerability details The function Factory.setAuctionDecrement allows the owner to set the state variable Factory.auctionDecrement to zero. Impact If Factory.auctionDecrement equals zero then the function Auction.settleAuction will always revert due to a division by zero: uint256 b =...