Логотип exploitDog
bind:CVE-2021-29530
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-29530

Количество 3

Количество 3

nvd логотип

CVE-2021-29530

больше 4 лет назад

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference by providing an invalid `permutation` to `tf.raw_ops.SparseMatrixSparseCholesky`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/080f1d9e257589f78b3ffb75debf584168aa6062/tensorflow/core/kernels/sparse/sparse_cholesky_op.cc#L85-L86) fails to properly validate the input arguments. Although `ValidateInputs` is called and there are checks in the body of this function, the code proceeds to the next line in `ValidateInputs` since `OP_REQUIRES`(https://github.com/tensorflow/tensorflow/blob/080f1d9e257589f78b3ffb75debf584168aa6062/tensorflow/core/framework/op_requires.h#L41-L48) is a macro that only exits the current function. Thus, the first validation condition that fails in `ValidateInputs` will cause an early return from that function. However, the caller will continue execution from the next line. The fix is to either explicitly check

CVSS3: 2.5
EPSS: Низкий
debian логотип

CVE-2021-29530

больше 4 лет назад

TensorFlow is an end-to-end open source platform for machine learning. ...

CVSS3: 2.5
EPSS: Низкий
github логотип

GHSA-xcwj-wfcm-m23c

больше 4 лет назад

Invalid validation in `SparseMatrixSparseCholesky`

CVSS3: 2.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-29530

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference by providing an invalid `permutation` to `tf.raw_ops.SparseMatrixSparseCholesky`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/080f1d9e257589f78b3ffb75debf584168aa6062/tensorflow/core/kernels/sparse/sparse_cholesky_op.cc#L85-L86) fails to properly validate the input arguments. Although `ValidateInputs` is called and there are checks in the body of this function, the code proceeds to the next line in `ValidateInputs` since `OP_REQUIRES`(https://github.com/tensorflow/tensorflow/blob/080f1d9e257589f78b3ffb75debf584168aa6062/tensorflow/core/framework/op_requires.h#L41-L48) is a macro that only exits the current function. Thus, the first validation condition that fails in `ValidateInputs` will cause an early return from that function. However, the caller will continue execution from the next line. The fix is to either explicitly check

CVSS3: 2.5
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-29530

TensorFlow is an end-to-end open source platform for machine learning. ...

CVSS3: 2.5
0%
Низкий
больше 4 лет назад
github логотип
GHSA-xcwj-wfcm-m23c

Invalid validation in `SparseMatrixSparseCholesky`

CVSS3: 2.5
0%
Низкий
больше 4 лет назад

Уязвимостей на страницу