Логотип exploitDog
bind:CVE-2021-37647
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-37647

Количество 4

Количество 4

nvd логотип

CVE-2021-37647

больше 4 лет назад

TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, `tf.raw_ops.SparseTensorSliceDataset` implementation can be made to dereference a null pointer. The [implementation](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/data/sparse_tensor_slice_dataset_op.cc#L240-L251) has some argument validation but fails to consider the case when either `indices` or `values` are provided for an empty sparse tensor when the other is not. If `indices` is empty, then [code that performs validation](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/data/sparse_tensor_slice_dataset_op.cc#L260-L261) (i.e., checking that the indices are monotonically increasing) results in a null pointer dereference. If `indices` as provided by the user is empty, then `indices` in the C++ code above is backed b

CVSS3: 7.7
EPSS: Низкий
debian логотип

CVE-2021-37647

больше 4 лет назад

TensorFlow is an end-to-end open source platform for machine learning. ...

CVSS3: 7.7
EPSS: Низкий
github логотип

GHSA-c5x2-p679-95wc

больше 4 лет назад

Null pointer dereference in `SparseTensorSliceDataset`

CVSS3: 7.7
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:10014-1

больше 3 лет назад

Security update for tensorflow2

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-37647

TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, `tf.raw_ops.SparseTensorSliceDataset` implementation can be made to dereference a null pointer. The [implementation](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/data/sparse_tensor_slice_dataset_op.cc#L240-L251) has some argument validation but fails to consider the case when either `indices` or `values` are provided for an empty sparse tensor when the other is not. If `indices` is empty, then [code that performs validation](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/data/sparse_tensor_slice_dataset_op.cc#L260-L261) (i.e., checking that the indices are monotonically increasing) results in a null pointer dereference. If `indices` as provided by the user is empty, then `indices` in the C++ code above is backed b

CVSS3: 7.7
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-37647

TensorFlow is an end-to-end open source platform for machine learning. ...

CVSS3: 7.7
0%
Низкий
больше 4 лет назад
github логотип
GHSA-c5x2-p679-95wc

Null pointer dereference in `SparseTensorSliceDataset`

CVSS3: 7.7
0%
Низкий
больше 4 лет назад
suse-cvrf логотип
openSUSE-SU-2022:10014-1

Security update for tensorflow2

больше 3 лет назад

Уязвимостей на страницу