PyPI/tensorflow CVE-2018-10055: high 8.1, EPSS 0.53%

Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow

Action: Upgrade tensorflow to 1.7.1 or later.

pip install tensorflow==1.7.1

Affected

Fixed versions

Sources

• osv: GHSA-q492-f7gr-27rp
• https://nvd.nist.gov/vuln/detail/CVE-2018-10055
• https://github.com/tensorflow/tensorflow/commit/c89ab82a82585cdaa90bf4911980e9e845909e78
• https://github.com/advisories/GHSA-q492-f7gr-27rp
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2019-222.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2019-229.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2019-204.yaml
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-006.md

CVE-2018-10055 · published 2019-04-30T15:37:31Z · modified 2024-10-28T14:34:46.932897Z · JSON