---

CVE-2021-29559 - log back

CVE-2021-29559 edited at 14 May 2021 21:48:53
Type	- Unknown + Information disclosure

CVE-2021-29559 edited at 14 May 2021 21:31:10
Severity	- Unknown + Low
Remote	- Unknown + Local
Description	+ A security issue has been found in TensorFlow before version 2.4.2. An attacker can access data outside of bounds of heap allocated array in `tf.raw_ops.UnicodeEncode`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/472c1f12ad9063405737679d4f6bd43094e1d36d/tensorflow/core/kernels/unicode_ops.cc) assumes that the `input_value`/`input_splits` pair specify a valid sparse tensor.
References	+ https://github.com/tensorflow/tensorflow/security/advisories/GHSA-59q2-x2qc-4c97 + https://github.com/tensorflow/tensorflow/commit/51300ba1cc2f487aefec6e6631fef03b0e08b298

CVE-2021-29559 created at 14 May 2021 20:37:16
Severity	+ Unknown
Remote	+ Unknown
Type	+ Unknown
Description
References
Notes