rpm package
suse/tensorflow2_2_6_0-gnu-openmpi2-hpc&distro=SUSE Package Hub 15 SP3
pkg:rpm/suse/tensorflow2_2_6_0-gnu-openmpi2-hpc&distro=SUSE%20Package%20Hub%2015%20SP3
Vulnerabilities (63)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-26267 | Med | 4.4 | < 2.6.0-bp153.2.3.1 | 2.6.0-bp153.2.3.1 | Dec 10, 2020 | In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not validate the src_format and dst_format attributes. The code assumes that these two arguments define a permutation of NHWC. This can result in uninitialized memory accesses, read outside of bounds | |
| CVE-2020-26266 | Med | 4.4 | < 2.6.0-bp153.2.3.1 | 2.6.0-bp153.2.3.1 | Dec 10, 2020 | In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code execution. This is caused by having tensor buffers be filled with the default value of the type but forgetting to default initialize the quantized floating poi | |
| CVE-2020-26271 | Med | 4.4 | < 2.6.0-bp153.2.3.1 | 2.6.0-bp153.2.3.1 | Dec 10, 2020 | In affected versions of TensorFlow under certain cases, loading a saved model can result in accessing uninitialized memory while building the computation graph. The MakeEdge function creates an edge between one output tensor of the src node (given by output_index) and the input s |
- affected < 2.6.0-bp153.2.3.1fixed 2.6.0-bp153.2.3.1
In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not validate the src_format and dst_format attributes. The code assumes that these two arguments define a permutation of NHWC. This can result in uninitialized memory accesses, read outside of bounds
- affected < 2.6.0-bp153.2.3.1fixed 2.6.0-bp153.2.3.1
In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code execution. This is caused by having tensor buffers be filled with the default value of the type but forgetting to default initialize the quantized floating poi
- affected < 2.6.0-bp153.2.3.1fixed 2.6.0-bp153.2.3.1
In affected versions of TensorFlow under certain cases, loading a saved model can result in accessing uninitialized memory while building the computation graph. The MakeEdge function creates an edge between one output tensor of the src node (given by output_index) and the input s
Page 4 of 4