Lucene search
+L

12903 matches found

PyPA
PyPA
added 2022/02/03 2:15 p.m.7 views

PYSEC-2022-117

Tensorflow is an Open Source Machine Learning Framework. The implementation of SparseCountSparseOutput can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this comm...

6.5CVSS7.2AI score0.00783EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/02/03 2:15 p.m.7 views

PYSEC-2022-117

Tensorflow is an Open Source Machine Learning Framework. The implementation of SparseCountSparseOutput can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this comm...

6.5CVSS5.9AI score0.00783EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/03 2:15 p.m.22 views

PYSEC-2022-62

Tensorflow is an Open Source Machine Learning Framework. The implementation of SparseCountSparseOutput can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this comm...

6.5CVSS3.8AI score0.00783EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/03 1:19 p.m.17 views

CVE-2022-21738 Integer overflow leading to crash in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The implementation of SparseCountSparseOutput can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this comm...

6.5CVSS6.5AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2022/02/03 1:19 p.m.77 views

CVE-2022-21738

Tensorflow is an Open Source Machine Learning Framework. The implementation of SparseCountSparseOutput can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this comm...

6.5CVSS7.2AI score0.00783EPSS
SaveExploits1
Cvelist
Cvelist
added 2022/02/03 1:19 p.m.57 views

CVE-2022-21738 Integer overflow leading to crash in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The implementation of SparseCountSparseOutput can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this comm...

6.5CVSS6.8AI score0.00783EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2022/02/03 1:19 p.m.4 views

CVE-2022-21738 Integer overflow leading to crash in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The implementation of SparseCountSparseOutput can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this comm...

6.5CVSS6.5AI score0.00783EPSS
SaveExploits1References3
NVD
NVD
added 2022/02/03 12:15 p.m.31 views

CVE-2022-21732

Tensorflow is an Open Source Machine Learning Framework. The implementation of ThreadPoolHandle can be used to trigger a denial of service attack by allocating too much memory. This is because the numthreads argument is only checked to not be negative, but there is no upper bound on its value. Th...

6.5CVSS0.00765EPSS
SaveExploits1References3
Prion
Prion
added 2022/02/03 12:15 p.m.17 views

Design/Logic Flaw

Tensorflow is an Open Source Machine Learning Framework. The implementation of ThreadPoolHandle can be used to trigger a denial of service attack by allocating too much memory. This is because the numthreads argument is only checked to not be negative, but there is no upper bound on its value. Th...

4CVSS6.4AI score0.00765EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2022/02/03 12:15 p.m.11 views

PYSEC-2022-56

Tensorflow is an Open Source Machine Learning Framework. The implementation of ThreadPoolHandle can be used to trigger a denial of service attack by allocating too much memory. This is because the numthreads argument is only checked to not be negative, but there is no upper bound on its value. Th...

6.5CVSS6.8AI score0.00765EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/02/03 12:15 p.m.9 views

PYSEC-2022-111

Tensorflow is an Open Source Machine Learning Framework. The implementation of ThreadPoolHandle can be used to trigger a denial of service attack by allocating too much memory. This is because the numthreads argument is only checked to not be negative, but there is no upper bound on its value. Th...

6.5CVSS5.9AI score0.00765EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/03 11:21 a.m.21 views

CVE-2022-21732 Memory exhaustion in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The implementation of ThreadPoolHandle can be used to trigger a denial of service attack by allocating too much memory. This is because the numthreads argument is only checked to not be negative, but there is no upper bound on its value. Th...

4.3CVSS6.3AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2022/02/03 11:21 a.m.13 views

CVE-2022-21732

Tensorflow is an Open Source Machine Learning Framework. The implementation of ThreadPoolHandle can be used to trigger a denial of service attack by allocating too much memory. This is because the numthreads argument is only checked to not be negative, but there is no upper bound on its value. Th...

6.5CVSS6.7AI score0.00765EPSS
SaveExploits1
CNNVD
CNNVD
added 2022/02/03 12:00 a.m.10 views

Google TensorFlow 安全漏洞

TensorFlow is an end-to-end open source machine learning platform. It has a comprehensive and flexible ecosystem of tools, libraries, and community resources that help researchers push the boundaries of advanced machine learning techniques and enable developers to easily build and deploy...

6.5CVSS5.7AI score0.00765EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2022/02/01 3:14 p.m.6 views

OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Swing. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.159EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2022/02/01 3:14 p.m.9 views

OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

5.3CVSS6.9AI score0.0679EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/01 12:00 a.m.60 views

RHEL 8 : java-1.8.0-ibm (RHSA-2022:0345)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0345 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE ...

9.8CVSS6.7AI score0.159EPSS
SaveExploits0References18
OSV
OSV
added 2022/01/28 10:35 p.m.17 views

GHSA-GM68-G349-GXGG Denial of service in bingrep

Bingrep v0.8.5 was discovered to contain a memory allocation failure which can cause a Denial of Service DoS...

7.5CVSS7.4AI score0.0105EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/01/28 12:00 a.m.47 views

Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x i686/x86_64 (2022:0306)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0306-1 advisory. - OpenJDK: Incomplete deserialization class filtering in ObjectInputStream Serialization, 8264934 CVE-2022-21248 - OpenJDK: Insufficient URI chec...

5.3CVSS6.3AI score0.08346EPSS
SaveExploits0References13
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.8 views

Mageia: Security Advisory (MGASA-2017-0299)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References6
Rows per page
Query Builder