Логотип exploitDog
bind:CVE-2021-41227
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-41227

Количество 3

Количество 3

nvd логотип

CVE-2021-41227

больше 4 лет назад

TensorFlow is an open source platform for machine learning. In affected versions the `ImmutableConst` operation in TensorFlow can be tricked into reading arbitrary memory contents. This is because the `tstring` TensorFlow string class has a special case for memory mapped strings but the operation itself does not offer any support for this datatype. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

CVSS3: 6.6
EPSS: Низкий
debian логотип

CVE-2021-41227

больше 4 лет назад

TensorFlow is an open source platform for machine learning. In affecte ...

CVSS3: 6.6
EPSS: Низкий
github логотип

GHSA-j8c8-67vp-6mx7

около 4 лет назад

Arbitrary memory read in `ImmutableConst`

CVSS3: 6.6
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-41227

TensorFlow is an open source platform for machine learning. In affected versions the `ImmutableConst` operation in TensorFlow can be tricked into reading arbitrary memory contents. This is because the `tstring` TensorFlow string class has a special case for memory mapped strings but the operation itself does not offer any support for this datatype. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

CVSS3: 6.6
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-41227

TensorFlow is an open source platform for machine learning. In affecte ...

CVSS3: 6.6
0%
Низкий
больше 4 лет назад
github логотип
GHSA-j8c8-67vp-6mx7

Arbitrary memory read in `ImmutableConst`

CVSS3: 6.6
0%
Низкий
около 4 лет назад

Уязвимостей на страницу