---

CVE-2021-29558 - log back

CVE-2021-29558 edited at 14 May 2021 21:48:41
Type	- Unknown + Arbitrary code execution

CVE-2021-29558 edited at 14 May 2021 21:31:08
Severity	- Unknown + Low
Remote	- Unknown + Local
Description	+ A security issue has been found in TensorFlow before version 2.4.2. An attacker can cause a heap buffer overflow in `tf.raw_ops.SparseSplit`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/699bff5d961f0abfde8fa3f876e6d241681fbef8/tensorflow/core/util/sparse/sparse_tensor.h#L528-L530) accesses an array element based on a user controlled offset.
References	+ https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mqh2-9wrp-vx84 + https://github.com/tensorflow/tensorflow/commit/8ba6fa29cd8bf9cef9b718dc31c78c73081f5b31

CVE-2021-29558 created at 14 May 2021 20:37:16
Severity	+ Unknown
Remote	+ Unknown
Type	+ Unknown
Description
References
Notes