logo

Database

Asymmetric denial of service In tensorflow-gpu

Description

Null pointer dereference in TensorFlow leads to exploitation Google TensorFlow 1.0.0 through 1.5.1 is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2018-75762. NVD-2018-75763. OSV-2018-75764. OSV-PYSEC-2019-2245. GHSA-jfq2-rj7f-9gvf6. GCVE-2018-75767. https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-002.md

References

1. https://github.com/tensorflow/tensorflow/commit/c48431588e7cf8aff61d4c299231e3e925144df82. https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2019-224.yaml3. https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2019-231.yaml4. https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2019-206.yaml5. https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-002.md

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.