Логотип exploitDog
bind:CVE-2021-41213
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-41213

Количество 3

Количество 3

nvd логотип

CVE-2021-41213

больше 4 лет назад

TensorFlow is an open source platform for machine learning. In affected versions the code behind `tf.function` API can be made to deadlock when two `tf.function` decorated Python functions are mutually recursive. This occurs due to using a non-reentrant `Lock` Python object. Loading any model which contains mutually recursive functions is vulnerable. An attacker can cause denial of service by causing users to load such models and calling a recursive `tf.function`, although this is not a frequent scenario. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2021-41213

больше 4 лет назад

TensorFlow is an open source platform for machine learning. In affecte ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-h67m-xg8f-fxcf

около 4 лет назад

Deadlock in mutually recursive `tf.function` objects

CVSS3: 5.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-41213

TensorFlow is an open source platform for machine learning. In affected versions the code behind `tf.function` API can be made to deadlock when two `tf.function` decorated Python functions are mutually recursive. This occurs due to using a non-reentrant `Lock` Python object. Loading any model which contains mutually recursive functions is vulnerable. An attacker can cause denial of service by causing users to load such models and calling a recursive `tf.function`, although this is not a frequent scenario. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

CVSS3: 5.5
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-41213

TensorFlow is an open source platform for machine learning. In affecte ...

CVSS3: 5.5
0%
Низкий
больше 4 лет назад
github логотип
GHSA-h67m-xg8f-fxcf

Deadlock in mutually recursive `tf.function` objects

CVSS3: 5.5
0%
Низкий
около 4 лет назад

Уязвимостей на страницу