tocsin

CVE-2022-23566

6 advisories.

PyPI/tensorflow CVE-2022-23566: high 8.8, EPSS 0.93%

Out of bounds write in Tensorflow

Action: Upgrade tensorflow to 2.5.3 or later.

pip install tensorflow==2.5.3
pip install tensorflow==2.6.3
pip install tensorflow==2.7.1

Affected

introducedfixedlast affected
02.5.3-
2.6.02.6.3-
2.7.02.7.1-

Fixed versions

2.5.32.6.32.7.1

Sources

CVE-2022-23566 · published · modified · JSON

PyPI/tensorflow-cpu CVE-2022-23566: high 8.8, EPSS 0.93%

Out of bounds write in Tensorflow

Action: Upgrade tensorflow-cpu to 2.5.3 or later.

pip install tensorflow-cpu==2.5.3
pip install tensorflow-cpu==2.6.3
pip install tensorflow-cpu==2.7.1

Affected

introducedfixedlast affected
02.5.3-
2.6.02.6.3-
2.7.02.7.1-

Fixed versions

2.5.32.6.32.7.1

Sources

CVE-2022-23566 · published · modified · JSON

PyPI/tensorflow-gpu CVE-2022-23566: high 8.8, EPSS 0.93%

Out of bounds write in Tensorflow

Action: Upgrade tensorflow-gpu to 2.5.3 or later.

pip install tensorflow-gpu==2.5.3
pip install tensorflow-gpu==2.6.3
pip install tensorflow-gpu==2.7.1

Affected

introducedfixedlast affected
02.5.3-
2.6.02.6.3-
2.7.02.7.1-

Fixed versions

2.5.32.6.32.7.1

Sources

CVE-2022-23566 · published · modified · JSON

PyPI/tensorflow-gpu CVE-2022-23566: unknown, EPSS 0.93%

Tensorflow is an Open Source Machine Learning Framework. TensorFlow is vulnerable to a heap OOB write in `Grappler`. The `set_output` function writes to an array at the specified index. Hence, this gi

Action: Upgrade tensorflow-gpu to 2.5.3 or later.

pip install tensorflow-gpu==2.5.3
pip install tensorflow-gpu==2.6.3

Affected

introducedfixedlast affected
02.5.3-
2.6.02.6.3-

Fixed versions

2.5.32.6.3

Sources

CVE-2022-23566 · published · modified · JSON

PyPI/tensorflow-cpu CVE-2022-23566: unknown, EPSS 0.93%

Tensorflow is an Open Source Machine Learning Framework. TensorFlow is vulnerable to a heap OOB write in `Grappler`. The `set_output` function writes to an array at the specified index. Hence, this gi

Action: Upgrade tensorflow-cpu to 2.5.3 or later.

pip install tensorflow-cpu==2.5.3
pip install tensorflow-cpu==2.6.3

Affected

introducedfixedlast affected
02.5.3-
2.6.02.6.3-

Fixed versions

2.5.32.6.3

Sources

CVE-2022-23566 · published · modified · JSON

PyPI/tensorflow CVE-2022-23566: high 8.8, EPSS 0.93%

Out of bounds write in Tensorflow

Action: Upgrade tensorflow to 2.5.3 or later.

pip install tensorflow==2.5.3
pip install tensorflow==2.6.3
pip install tensorflow==2.7.1

Affected

introducedfixedlast affected
02.5.3-
2.6.02.6.3-
2.7.02.7.1-

Fixed versions

2.5.32.6.32.7.1

Sources

CVE-2022-23566 · published · modified · JSON