Логотип exploitDog
bind:CVE-2022-29205
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-29205

Количество 3

Количество 3

nvd логотип

CVE-2022-29205

больше 3 лет назад

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of service in TensorFlow by calling `tf.compat.v1.*` ops which don't yet have support for quantized types, which was added after migration to TensorFlow 2.x. In these scenarios, since the kernel is missing, a `nullptr` value is passed to `ParseDimensionValue` for the `py_value` argument. Then, this is dereferenced, resulting in segfault. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2022-29205

больше 3 лет назад

TensorFlow is an open source platform for machine learning. Prior to v ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-54ch-gjq5-4976

больше 3 лет назад

Segfault due to missing support for quantized types

CVSS3: 5.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-29205

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of service in TensorFlow by calling `tf.compat.v1.*` ops which don't yet have support for quantized types, which was added after migration to TensorFlow 2.x. In these scenarios, since the kernel is missing, a `nullptr` value is passed to `ParseDimensionValue` for the `py_value` argument. Then, this is dereferenced, resulting in segfault. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

CVSS3: 5.5
0%
Низкий
больше 3 лет назад
debian логотип
CVE-2022-29205

TensorFlow is an open source platform for machine learning. Prior to v ...

CVSS3: 5.5
0%
Низкий
больше 3 лет назад
github логотип
GHSA-54ch-gjq5-4976

Segfault due to missing support for quantized types

CVSS3: 5.5
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу