BIT-TENSORFLOW-2021-29618 Crash in `tf.transpose` with complex inputs

TensorFlow is an end-to-end open source platform for machine learning. Passing a complex argument to tf.transpose at the same time as passing conjugate=True argument results in a crash. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFl...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker is able to crash the system by passing a complex argument to tf.transpose and setting conjugate=True...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-36360)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow has a security vulnerability that can be exploited by an attacker to cause a crash by passing a complex parameter to tf.transpose while passing the conjugate=True parameter to...

CVE-2021-29618

TensorFlow is an end-to-end open source platform for machine learning. Passing a complex argument to tf.transpose at the same time as passing conjugate=True argument results in a crash. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFl...

PYSEC-2021-255

TensorFlow is an end-to-end open source platform for machine learning. Passing a complex argument to tf.transpose at the same time as passing conjugate=True argument results in a crash. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFl...

PT-2021-18369 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions 2.1.4 through 2.4.2 TensorFlow version 2.5.0 is not affected as it includes the fix. Description: Passing a complex argument to tf.transpose at the same time as passing conjugate=True argument results in a crash. The issue...