Lucene search
+L

1566 matches found

Github Security Blog
Github Security Blog
added 2022/02/09 11:26 p.m.33 views

Uninitialized variable access in Tensorflow

Impact The implementation of AssignOp can result in copying unitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of allocations, but does not check that the right hand...

8.8CVSS1.1AI score0.00755EPSS
SaveExploits1References7Affected Software3
CNVD
CNVD
added 2022/02/09 12:0 a.m.15 views

Google Tensorflow has an unspecified vulnerability (CNVD-2022-09886)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google Tensorflow, which stems from an implementation of AssignOp that can lead to copying uninitialized data to a new tensor. No detailed vulnerability details are...

8.8CVSS2.9AI score0.00755EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:0 a.m.31 views

AlmaLinux 8 : libxslt (ALSA-2020:4464)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2020:4464 advisory. - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -...

9.8CVSS7.6AI score0.05089EPSS
SaveExploits0References3
Veracode
Veracode
added 2022/02/08 7:30 a.m.24 views

Denial Of Service (DoS)

Tensorflow is vulnerable to denial of service. The vulnerability exists due to an undefined behavior during the implementation of AssignOp which can result in uninitialized data being copied to a new tensor...

8.8CVSS3.2AI score0.00755EPSS
SaveExploits1References3Affected Software3
NVD
NVD
added 2022/02/04 11:15 p.m.32 views

CVE-2022-23573

Tensorflow is an Open Source Machine Learning Framework. The implementation of AssignOp can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of...

8.8CVSS0.00755EPSS
SaveExploits1References3
PyPA
PyPA
added 2022/02/04 11:15 p.m.6 views

PYSEC-2022-137

Tensorflow is an Open Source Machine Learning Framework. The implementation of AssignOp can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of...

8.8CVSS6.9AI score0.00755EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2022/02/04 11:15 p.m.6 views

PYSEC-2022-82

Tensorflow is an Open Source Machine Learning Framework. The implementation of AssignOp can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of...

8.8CVSS6.9AI score0.00755EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/02/04 11:15 p.m.4 views

PYSEC-2022-137

Tensorflow is an Open Source Machine Learning Framework. The implementation of AssignOp can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of...

8.8CVSS7.2AI score0.00755EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/04 11:15 p.m.44 views

PYSEC-2022-82

Tensorflow is an Open Source Machine Learning Framework. The implementation of AssignOp can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of...

8.8CVSS0.9AI score0.00755EPSS
SaveExploits1References3
Prion
Prion
added 2022/02/04 11:15 p.m.24 views

Stack overflow

Tensorflow is an Open Source Machine Learning Framework. The implementation of AssignOp can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of...

6.5CVSS8.5AI score0.00755EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2022/02/04 10:32 p.m.90 views

CVE-2022-23573

TensorFlow's AssignOp implementation can copy uninitialized data to a new tensor, causing undefined behavior. This CVE (CVE-2022-23573) affects the TensorFlow core kernel related to AssignOp. The issue arises because the left-hand side is initialized, but the right-hand side is not checked for in...

8.8CVSS7.9AI score0.00755EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/02/04 10:32 p.m.22 views

CVE-2022-23573 Uninitialized variable access in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The implementation of AssignOp can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of...

7.6CVSS8.5AI score0.00755EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2022/02/04 10:32 p.m.4 views

CVE-2022-23573

Tensorflow is an Open Source Machine Learning Framework. The implementation of AssignOp can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of...

8.8CVSS6.9AI score0.00755EPSS
SaveExploits1
OSV
OSV
added 2022/02/04 8:15 p.m.9 views

CVE-2022-24448

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the ODIRECTORY flag, and tries to open a regular file, nfsatomicopen performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in...

3.3CVSS7.3AI score
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 2022/02/04 8:15 p.m.7 views

CVE-2022-24448

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the ODIRECTORY flag, and tries to open a regular file, nfsatomicopen performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in...

3.3CVSS6.8AI score0.00397EPSS
SaveExploits0References12
OSV
OSV
added 2022/02/04 8:15 p.m.1 views

DEBIAN-CVE-2022-24448

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the ODIRECTORY flag, and tries to open a regular file, nfsatomicopen performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in...

3.3CVSS6.3AI score0.00397EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/04 8:15 p.m.8 views

AZL-8483 CVE-2022-24448 affecting package kernel for versions less than 5.15.26.1-1

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the ODIRECTORY flag, and tries to open a regular file, nfsatomicopen performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in...

3.3CVSS6.7AI score0.00397EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/04 8:15 p.m.4 views

UBUNTU-CVE-2022-24448

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the ODIRECTORY flag, and tries to open a regular file, nfsatomicopen performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in...

3.3CVSS6.6AI score0.00397EPSS
SaveExploits0References11
CVE
CVE
added 2022/02/04 7:45 p.m.307 views

CVE-2022-24448

CVE-2022-24448 affects the Linux kernel’s NFS path: in fs/nfs/dir.c, if an application opens a regular file with O_DIRECTORY set, nfs_atomic_open() does a regular lookup and returns uninitialized data in the file descriptor when a regular file is found instead of ENOTDIR. This issue is documented...

3.3CVSS5.4AI score0.00397EPSS
SaveExploits0References10Affected Software1
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.5 views

Google Tensorflow 安全漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google Tensorflow, which stems from an implementation of AssignOp that can lead to copying uninitialized data to a new tensor. No detailed vulnerability details are...

8.8CVSS5.6AI score0.00755EPSS
SaveExploits1References4
Rows per page
Query Builder