Segfault due to missing support for quantized types

Impact There is a potential for segfault / denial of service in TensorFlow by calling tf.compat.v1. ops which don't yet have support for quantized types added after migration to TF 2.x: python import numpy as np import tensorflow as tf...

Apache Traffic Control Traffic Ops Vulnerable to LDAP Injection

An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /login endpoint of any API version to inject unsanitized content into the LDAP filter...

GHSA-MG2C-RC36-P594 Apache Traffic Control Traffic Ops Vulnerable to LDAP Injection

An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /login endpoint of any API version to inject unsanitized content into the LDAP filter...

Ops CLI Deserialization of Untrusted Data vulnerability

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

GHSA-X23Q-4J9J-9CXW Ops CLI Deserialization of Untrusted Data vulnerability

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the tf.rawops.DeleteSessionTensor in sessionops.cc does not properly validate the input arguments, allowing an attacker to crash the application through the CHECK failure...

CVE-2022-29213 Incomplete validation in signal ops leads to crashes in TensorFlow

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the tf.compat.v1.signal.rfft2d and tf.compat.v1.signal.rfft3d lack input validation and under certain condition can result in crashes due to CHECK-failures. Versions 2.9.0, 2.8.1, 2.7.2,...

Cloud Foundry vulnerable to Cross-Site Request Forgery

Multiple cross-site request forgery CSRF vulnerabilities in Pivotal Cloud Foundry PCF before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH before 11.5 and 12.x before 12.5; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops...

kernel: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()

A flaw was found in the Linux kernel. A memory leak in the ccp-ops crypto driver can allow attackers to cause a denial of service. This vulnerability is similar with the older CVE-2019-18808. The highest threat from this vulnerability is to system availability...

PT-2022-29974

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.34 Description The issue is related to a delay in the xen hvm init time ops function when kdump is booting on vcpu=32. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30204

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.32 Description The issue is related to the use of try get ops in tpm-space.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.15.32,...

PT-2022-30417

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.109 Description The issue is related to the use of try get ops in tpm-space.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.10...

PT-2022-30690

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to the mmc host, where an error should be returned when the -enable sdio irq ops is missing. The actual impact and attack plausibility have not yet been proven...

PT-2022-29900

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.18 Description The issue is related to the use of try get ops in tpm-space.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.16.18,...

PT-2022-30464

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.189 Description The issue is related to a delay in the xen hvm init time ops function when kdump is booting on vcpu=32. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29647

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.16.20 Description The issue is related to a delay in the xen hvm init time ops function when kdump is booting on vcpu=32. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30588

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 4.19.238 Description The issue is related to a delay in the xen hvm init time ops function when kdump is booting on vcpu=32. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30555

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.188 Description The issue is related to the use of try get ops in tpm-space.c. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.188,...

Oracle Enterprise Manager Ops Center (Apr 2022 CPU)

The 12.4.0.0 versions of Enterprise Manager Ops Center installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2022 CPU advisory. - Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization component: Web Server Apache HTTP Server...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-1376)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...