Количество 3
Количество 3
CVE-2021-29615
TensorFlow is an end-to-end open source platform for machine learning. The implementation of `ParseAttrValue`(https://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/framework/attr_value_util.cc#L397-L453) can be tricked into stack overflow due to recursion by giving in a specially crafted input. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.
CVE-2021-29615
TensorFlow is an end-to-end open source platform for machine learning. ...
GHSA-qw5h-7f53-xrp6
Stack overflow in `ParseAttrValue` with nested tensors
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-29615 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `ParseAttrValue`(https://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/framework/attr_value_util.cc#L397-L453) can be tricked into stack overflow due to recursion by giving in a specially crafted input. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range. | CVSS3: 2.5 | 0% Низкий | больше 4 лет назад |
| CVE-2021-29615 TensorFlow is an end-to-end open source platform for machine learning. ... | CVSS3: 2.5 | 0% Низкий | больше 4 лет назад |
| GHSA-qw5h-7f53-xrp6 Stack overflow in `ParseAttrValue` with nested tensors | CVSS3: 2.5 | 0% Низкий | больше 4 лет назад |
Уязвимостей на страницу