PyPI/tensorflow CVE-2019-9635: medium 6.5, EPSS 0.48%

NULL Pointer Dereference in Google TensorFlow

Action: Upgrade tensorflow to 1.12.1 or later.

pip install tensorflow==1.12.1

Affected

Fixed versions

Sources

• osv: GHSA-mfg7-x5m7-6p8w
• https://nvd.nist.gov/vuln/detail/CVE-2019-9635
• https://github.com/tensorflow/tensorflow/commit/e41cb124cd0b325821af85cdacd9d8a12e206418
• https://github.com/advisories/GHSA-mfg7-x5m7-6p8w
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2019-228.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2019-235.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2019-210.yaml
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2019-001.md

CVE-2019-9635 · published 2019-04-30T15:37:17Z · modified 2024-10-28T14:43:52.943215Z · JSON