PyPI/tensorflow CVE-2021-29524: unknown, EPSS 0.19%

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a division by 0 in `tf.raw_ops.Conv2DBackpropFilter`. This is because the implementation(https://github.c

Action: Upgrade tensorflow to 2.1.4 or later.

pip install tensorflow==2.1.4

pip install tensorflow==2.2.3

pip install tensorflow==2.3.3

pip install tensorflow==2.4.2

Affected

introduced	fixed	last affected
0	2.1.4	-
2.2.0	2.2.3	-
2.3.0	2.3.3	-
2.4.0	2.4.2	-

Fixed versions

2.1.4

2.2.3

2.3.3

2.4.2

Sources

osv: PYSEC-2021-161
https://github.com/tensorflow/tensorflow/commit/fca9874a9b42a2134f907d2fb46ab774a831404a
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r4pj-74mg-8868

CVE-2021-29524 · published 2021-05-14T20:15:00Z · modified 2023-12-06T01:01:03.921269Z · JSON