Lucene search
+L

26 matches found

PyPA
PyPA
added 2021/08/12 11:15 p.m.8 views

PYSEC-2021-295

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a denial of service via a CHECK-fail in tf.rawops.MapStage. The implementation does not check that the key input is a valid non-empty tensor. We have patched the issue in GitHub...

5.5CVSS6.8AI score0.00154EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/08/12 11:15 p.m.3 views

CVE-2021-37673

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a denial of service via a CHECK-fail in tf.rawops.MapStage. The implementation does not check that the key input is a valid non-empty tensor. We have patched the issue in GitHub...

5.5CVSS5.6AI score0.00154EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/08/12 11:15 p.m.10 views

PYSEC-2021-295

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a denial of service via a CHECK-fail in tf.rawops.MapStage. The implementation does not check that the key input is a valid non-empty tensor. We have patched the issue in GitHub...

5.5CVSS6AI score0.00154EPSS
SaveExploits0References2
CVE
CVE
added 2021/08/12 10:55 p.m.120 views

CVE-2021-37673

TensorFlow maps-stage DoS (CVE-2021-37673). The issue arises from tf.raw_ops.MapStage not validating non-empty key tensors, enabling a local attacker to trigger a denial-of-service via a CHECK-fail. Patches were committed and the fix is expected in TensorFlow 2.6.0, with backports to 2.5.1, 2.4.3...

5.5CVSS5.5AI score0.00154EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/08/12 10:55 p.m.30 views

CVE-2021-37673 `CHECK`-fail in `MapStage` in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a denial of service via a CHECK-fail in tf.rawops.MapStage. The implementation does not check that the key input is a valid non-empty tensor. We have patched the issue in GitHub...

5.5CVSS6AI score0.00154EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/08/12 12:0 a.m.9 views

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in tf.rawops.MapStage in Google TensorFlow versions prior to 2.6.0. An attacker can exploit this vulnerability to cause a denial of service...

5.5CVSS5.3AI score0.00154EPSS
SaveExploits0References5
Rows per page
Query Builder