Lucene search
+L

234 matches found

Github Security Blog
Github Security Blog
added 2021/05/21 2:23 p.m.36 views

Division by 0 in `QuantizedAdd`

Impact An attacker can cause a runtime division by zero error and denial of service in tf.rawops.QuantizedAdd: python import tensorflow as tf x = tf.constant68, 228, shape=2, 1, dtype=tf.quint8 y = tf.constant, shape=2, 0, dtype=tf.quint8 minx = tf.constant10.723421015884028 maxx =...

5.5CVSS1.5AI score0.00189EPSS
SaveExploits1References7Affected Software3
Github Security Blog
Github Security Blog
added 2021/05/21 2:23 p.m.34 views

Division by 0 in `QuantizedBatchNormWithGlobalNormalization`

Impact An attacker can cause a runtime division by zero error and denial of service in tf.rawops.QuantizedBatchNormWithGlobalNormalization: python import tensorflow as tf t = tf.constant, shape=0, 0, 0, 0, dtype=tf.quint8 tmin = tf.constant-10.0, dtype=tf.float32 tmax = tf.constant-10.0,...

5.5CVSS2.4AI score0.00189EPSS
SaveExploits1References7Affected Software3
CNVD
CNVD
added 2021/05/18 12:0 a.m.50 views

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-37631)

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow. The vulnerability stems from an FPE runtime error in tf.rawops.SparseMatMul. An attacker can exploit the vulnerability to cause a denial of service...

5.5CVSS6.4AI score0.00189EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/05/18 12:0 a.m.42 views

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-37628)

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow. The vulnerability stems from an FPE runtime error in tf.rawops.DenseCountSparseOutput. An attacker can exploit the vulnerability to cause a denial of service...

5.5CVSS6.4AI score0.00189EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/05/18 12:0 a.m.10 views

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-37629)

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow. The vulnerability stems from an FPE runtime error in tf.rawops.FusedBatchNorm. An attacker can exploit the vulnerability to cause a denial of service...

5.5CVSS6.4AI score0.00189EPSS
SaveExploits1References1
Veracode
Veracode
added 2021/05/17 12:7 p.m.32 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker may exploit the vulnerability by inputting a crafted x tensor which may cause a FPE runtime error in tf.rawops.FusedBatchNorm...

5.5CVSS3.9AI score0.00189EPSS
SaveExploits1References2Affected Software3
Veracode
Veracode
added 2021/05/17 10:0 a.m.26 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. A division by zero undefined behavior in a FPE runtime error in tf.rawops.SparseMatMul because it performs division without checking if the b tensor is empty, allowing an attacker to crash the application...

5.5CVSS3.2AI score0.00189EPSS
SaveExploits1References2Affected Software3
Veracode
Veracode
added 2021/05/17 3:52 a.m.25 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker is able to trigger an FPE runtime error in tf.rawops.Reverse as it performs a division based on the first dimension of the tensor argument...

5.5CVSS5.2AI score0.00189EPSS
SaveExploits1References3Affected Software3
OSV
OSV
added 2021/05/14 8:15 p.m.23 views

CVE-2021-29557

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.SparseMatMul. The division by 0 occurs deep in Eigen code because the b tensor is empty. The fix will be included in TensorFlow 2.5.0. We will also...

5.5CVSS5.5AI score
SaveExploits0References2
NVD
NVD
added 2021/05/14 8:15 p.m.48 views

CVE-2021-29557

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.SparseMatMul. The division by 0 occurs deep in Eigen code because the b tensor is empty. The fix will be included in TensorFlow 2.5.0. We will also...

5.5CVSS0.00189EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.24 views

CVE-2021-29549

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a runtime division by zero error and denial of service in tf.rawops.QuantizedBatchNormWithGlobalNormalization. This is because the...

5.5CVSS5.3AI score
SaveExploits0References2
Prion
Prion
added 2021/05/14 8:15 p.m.23 views

Code injection

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.SparseMatMul. The division by 0 occurs deep in Eigen code because the b tensor is empty. The fix will be included in TensorFlow 2.5.0. We will also...

2.1CVSS5.5AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.8 views

PYSEC-2021-484

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.Reverse. This is because the...

5.5CVSS6.8AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.15 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a runtime division by zero error and denial of service in tf.rawops.QuantizedBatchNormWithGlobalNormalization. This is because the...

2.1CVSS5.4AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.6 views

PYSEC-2021-683

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.SparseMatMul. The division by 0 occurs deep in Eigen code because the b tensor is empty. The fix will be included in TensorFlow 2.5.0. We will also...

5.5CVSS7.1AI score0.00189EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/05/14 8:15 p.m.5 views

PYSEC-2021-682

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.Reverse. This is because the...

5.5CVSS6.1AI score0.00189EPSS
SaveExploits1References2
PyPA
PyPA
added 2021/05/14 8:15 p.m.5 views

PYSEC-2021-681

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.FusedBatchNorm. This is because the...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.16 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.Reverse. This is because the...

2.1CVSS5.3AI score0.00189EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/05/14 8:15 p.m.23 views

PYSEC-2021-483

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.FusedBatchNorm. This is because the...

5.5CVSS1.3AI score0.00189EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.8 views

PYSEC-2021-681

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.FusedBatchNorm. This is because the...

5.5CVSS6.1AI score0.00189EPSS
SaveExploits1References2
Rows per page
Query Builder