CVE-2023-25662 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25662 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is available...

CVE-2023-25669 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25669 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is available...

CVE-2023-25660 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25660 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is available...

CVE-2023-25670 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25670 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is available...

Denial of Service in TensorFlow

...

AZL-38341 CVE-2023-38039 affecting package tensorflow for versions less than 2.16.1-1

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of header...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in TensorFlow

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of TensorFlow. IBM has addressed the vulnerabilities. Vulnerability Details CVEID:CVE-2023-27506 DESCRIPTION: Intel Optimization for Tensorflow could allow a local authenticated attacker to gain elevat...

Security Bulletin: Multiple security vulnerabilities affect IBM Robotic Process Automation

Summary Python, Apache Spark, Tensorflow and Traefik contain multiple vulnerabilities and are used by IBM Robotic Process Automation as part of Watson NLP CVE-2022-40898, CVE-2023-22946, CVE-2023-25658, CVE-2023-25659, CVE-2023-25660, CVE-2023-25661, CVE-2023-25662, CVE-2023-25663, CVE-2023-25664...

CVE-2023-27506

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

Buffer overflow

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27506

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27506

CVE-2023-27506 affects Intel® Optimization for TensorFlow prior to 2.12. The issue arises from improper buffer restrictions, enabling a locally authenticated attacker to potentially escalate privileges on the system. Intel and multiple advisories reference the same vulnerability, with the primary...

CVE-2023-27506

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-21178

Name of the Vulnerable Software and Affected Versions IntelR Optimization for Tensorflow versions prior to 2.12 Description The issue is related to improper buffer restrictions, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations F...

Intel Optimization for Tensorflow software buffer error vulnerability

Intel Optimization for Tensorflow is a set of tools and libraries optimized for the TensorFlow framework from Intel Corporation USA. A security vulnerability exists in Intel Optimization for Tensorflow versions prior to 2.12, which stems from incorrect buffer limits. An attacker can exploit the...

CVE-2023-27506: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulerabilities in TensorFlow

Summary Multiple vulnerabilities in TensorFlow have been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerabilities have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-25658 DESCRIPTION: TensorFlow is vulnerab...

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in TensorFlow

Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of TensorFlow. IBM has addressed the vulnerabilities. Vulnerability Details CVEID:CVE-2023-25661 DESCRIPTION: TensorFlow is vulnerable to a denial of service, caused by improper input validation by the...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in TensorFlow [CVE-2023-25668]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in TensorFlow, caused by a heap-based buffer overflow. CVE-2023-25668 TensorFlow is included as part of the runtimes in our service. This vulnerabilitiy has been addressed. Please read the...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in TensorFlow (CVE-2023-25661)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in TensorFlow, caused by improper input validation by the Convolution3DTranspose function CVE-2023-25661. TensorFlow is included as part of the runtimes in our service. This vulnerabilitiy...