c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), cifar-10-model (7.4.0) +17 more potentially affected by CVE-2023-25672 via tensorflow-cpu (>=2.1.0, <=2.11.0)

🗓️ 24 Mar 2023 21:54:55Reported by Vulners OSVType

vulnersosv🔗 github.com👁 1 Views

CVE-2023-25672 in tensorflow-cpu affects several packages including colabfold.

Reporter	Title	Published	Views	Family All 138
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM Robotic Process Automation	31 Aug 202314:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data Are Addressed	8 Dec 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulerabilities in TensorFlow	6 Jul 202317:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in TensorFlow (CVE-2023-25672)	28 Jun 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties in Open Source packages affecting IBM Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple Tensorflow vulnerabilities.	1 Feb 202413:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in TensorFlow	28 Jun 202321:21	–	ibm
CBLMariner	CVE-2023-25672 affecting package tensorflow for versions less than 2.11.1-1	15 Oct 202308:09	–	cbl_mariner
CBLMariner	CVE-2023-25672 affecting package tensorflow for versions less than 2.11.1-1	31 Jan 202516:08	–	cbl_mariner
Circl	CVE-2023-25672	25 Mar 202306:38	–	circl

30 Mar 2023 16:59Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.00361

SSVC

tensorflow-cpu colabfold c4v-py cifar-10-model clip-jax hover