PYSEC-2022-78

Tensorflow is an Open Source Machine Learning Framework. Multiple operations in TensorFlow can be used to trigger a denial of service via CHECK-fails i.e., assertion failures. This is similar to TFSA-2021-198 and has similar fixes. We have patched the reported issues in multiple GitHub commits. I...

CVE-2022-23569 `CHECK`-fails when building invalid tensor shapes in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. Multiple operations in TensorFlow can be used to trigger a denial of service via CHECK-fails i.e., assertion failures. This is similar to TFSA-2021-198 and has similar fixes. We have patched the reported issues in multiple GitHub commits. I...

CVE-2022-23569

TensorFlow/CVE-2022-23569: Denial‑of‑service via CHECK‑fails (assertion failures) across multiple ops in TensorFlow/TFLite, caused by invalid tensor shapes and related checks. Root cause: assertion failures in core paths; fixes released as patches implemented in GitHub commits. Remediation: upgra...

CVE-2022-23569

Tensorflow is an Open Source Machine Learning Framework. Multiple operations in TensorFlow can be used to trigger a denial of service via CHECK-fails i.e., assertion failures. This is similar to TFSA-2021-198 and has similar fixes. We have patched the reported issues in multiple GitHub commits. I...

PYSEC-2022-76

Tensorflow is an Open Source Machine Learning Framework. The implementations of SparseCwise ops are vulnerable to integer overflows. These can be used to trigger large allocations so, OOM based denial of service or CHECK-fails when building new TensorShape objects so, assert failures based denial...

PYSEC-2022-131

Tensorflow is an Open Source Machine Learning Framework. The implementations of SparseCwise ops are vulnerable to integer overflows. These can be used to trigger large allocations so, OOM based denial of service or CHECK-fails when building new TensorShape objects so, assert failures based denial...

PYSEC-2022-131

Tensorflow is an Open Source Machine Learning Framework. The implementations of SparseCwise ops are vulnerable to integer overflows. These can be used to trigger large allocations so, OOM based denial of service or CHECK-fails when building new TensorShape objects so, assert failures based denial...

Mageia: Security Advisory (MGASA-2018-0027)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-23028

On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when global AFM SYN cookie protection TCP Half Open flood vector is activated in the AFM Device Dos or DOS profile, certain types of TCP connections will fail. Note: Software versio...

CVE-2022-23028

On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when global AFM SYN cookie protection TCP Half Open flood vector is activated in the AFM Device Dos or DOS profile, certain types of TCP connections will fail. Note: Software versio...

X Window System X.Org Server Buffer Overflow DoS

The vulnerability of the SProcXFixesCreatePointerBarrier function in the X Window System X.Org Server implementation is related to the execution of operations that exceed the permissible limits of the data buffer. Exploiting this vulnerability can allow an attacker to access confidential data,...

X Window System X.Org Server Buffer Overflow DoS

The vulnerability of the SProcXFixesCreatePointerBarrier function in the X Window System X.Org Server implementation is related to the execution of operations that exceed the permissible limits of the data buffer. Exploiting this vulnerability can allow an attacker to access confidential data,...

Wi-Fi Router Buffer Overflow DoS

The vulnerability of Microprogrammed Wi-Fi router software, including CBR750, D6220, D6400, D8500, LAX20, MK62, MR60, MS60, R6300v2, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75,...

NETGEAR EX7500 Wi-Fi Router Resource Leak DoS

The vulnerability of NETGEAR EX7500, RBS40V, RBW30, RBKE963, RBRE960, RBSE960, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852 Wi-Fi routers is related to improper resource release. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

NETGEAR Wi-Fi router software Resource Release DoS

The vulnerability of NETGEAR Wi-Fi router software models such as R6400, R7000, R6900P, R7000P, R8000, RBK852, RBR850, and RBS850 lies in improper resource release. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Hitachi Energy FOX615 XCM20 DoS

The vulnerability of the proprietary protocol used for managing microprogramming software on Hitachi Energy’s multi-server platforms FOX615 and XCM20 is related to data processing deficiencies. Exploiting this vulnerability can allow attackers to cause service failures through Data Communication...

NETGEAR Wi-Fi Router Service Data Protection

The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as AC2100, AC2400, AC2600, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 is related to insufficient protection for service data. Exploiting this vulnerability can allow an...

NETGEAR Wi-Fi Router DoS

The vulnerability of NETGEAR’s Wi-Fi router software, including models RBK352, RBR350, and RBS350, lies in the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious actor to remotely cause service failures...

CVE-2022-0318

Heap-based Buffer Overflow in vim/vim prior to 8.2...

PostgreSQL Rails Uncontrolled Resource Consumption DoS

The vulnerability of the PostgreSQL adapter for the Rails framework is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...