Логотип exploitDog
bind:CVE-2021-37640
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-37640

Количество 4

Количество 4

nvd логотип

CVE-2021-37640

больше 4 лет назад

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.SparseReshape` can be made to trigger an integral division by 0 exception. The [implementation](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/reshape_util.cc#L176-L181) calls the reshaping functor whenever there is at least an index in the input but does not check that shape of the input or the target shape have both a non-zero number of elements. The [reshape functor](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/reshape_util.cc#L40-L78) blindly divides by the dimensions of the target shape. Hence, if this is not checked, code will result in a division by 0. We have patched the issue in GitHub commit 4923de56ec94fff7770df259ab7f2288a74feb41. The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFl

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2021-37640

больше 4 лет назад

TensorFlow is an end-to-end open source platform for machine learning. ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-95xm-g58g-3p88

больше 4 лет назад

Integer division by 0 in sparse reshaping

CVSS3: 5.5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:10014-1

больше 3 лет назад

Security update for tensorflow2

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-37640

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.SparseReshape` can be made to trigger an integral division by 0 exception. The [implementation](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/reshape_util.cc#L176-L181) calls the reshaping functor whenever there is at least an index in the input but does not check that shape of the input or the target shape have both a non-zero number of elements. The [reshape functor](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/reshape_util.cc#L40-L78) blindly divides by the dimensions of the target shape. Hence, if this is not checked, code will result in a division by 0. We have patched the issue in GitHub commit 4923de56ec94fff7770df259ab7f2288a74feb41. The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFl

CVSS3: 5.5
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-37640

TensorFlow is an end-to-end open source platform for machine learning. ...

CVSS3: 5.5
0%
Низкий
больше 4 лет назад
github логотип
GHSA-95xm-g58g-3p88

Integer division by 0 in sparse reshaping

CVSS3: 5.5
0%
Низкий
больше 4 лет назад
suse-cvrf логотип
openSUSE-SU-2022:10014-1

Security update for tensorflow2

больше 3 лет назад

Уязвимостей на страницу