Логотип exploitDog
bind:CVE-2022-35960
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-35960

Количество 3

Количество 3

nvd логотип

CVE-2022-35960

больше 3 лет назад

TensorFlow is an open source platform for machine learning. In `core/kernels/list_kernels.cc's TensorListReserve`, `num_elements` is assumed to be a tensor of size 1. When a `num_elements` of more than 1 element is provided, then `tf.raw_ops.TensorListReserve` fails the `CHECK_EQ` in `CheckIsAlignedAndSingleElement`. We have patched the issue in GitHub commit b5f6fbfba76576202b72119897561e3bd4f179c7. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.

CVSS3: 5.9
EPSS: Низкий
debian логотип

CVE-2022-35960

больше 3 лет назад

TensorFlow is an open source platform for machine learning. In `core/k ...

CVSS3: 5.9
EPSS: Низкий
github логотип

GHSA-v5xg-3q2c-c2r4

больше 3 лет назад

TensorFlow vulnerable to `CHECK` failure in `TensorListReserve` via missing validation

CVSS3: 5.9
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-35960

TensorFlow is an open source platform for machine learning. In `core/kernels/list_kernels.cc's TensorListReserve`, `num_elements` is assumed to be a tensor of size 1. When a `num_elements` of more than 1 element is provided, then `tf.raw_ops.TensorListReserve` fails the `CHECK_EQ` in `CheckIsAlignedAndSingleElement`. We have patched the issue in GitHub commit b5f6fbfba76576202b72119897561e3bd4f179c7. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.

CVSS3: 5.9
0%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-35960

TensorFlow is an open source platform for machine learning. In `core/k ...

CVSS3: 5.9
0%
Низкий
больше 3 лет назад
github логотип
GHSA-v5xg-3q2c-c2r4

TensorFlow vulnerable to `CHECK` failure in `TensorListReserve` via missing validation

CVSS3: 5.9
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу