---

CVE-2021-29573 - log back

CVE-2021-29573 edited at 14 May 2021 21:51:25
Type	- Unknown + Denial of service

CVE-2021-29573 edited at 14 May 2021 21:31:30
Severity	- Unknown + Low
Remote	- Unknown + Local
Description	+ A security issue has been found in TensorFlow before version 2.4.2. The implementation of `tf.raw_ops.MaxPoolGradWithArgmax` is vulnerable to a division by 0. The implementation(https://github.com/tensorflow/tensorflow/blob/279bab6efa22752a2827621b7edb56a730233bd8/tensorflow/core/kernels/maxpooling_op.cc#L1033-L1034) fails to validate that the batch dimension of the tensor is non-zero, before dividing by this quantity.
References	+ https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9vpm-rcf4-9wqw + https://github.com/tensorflow/tensorflow/commit/376c352a37ce5a68b721406dc7e77ac4b6cf483d

CVE-2021-29573 created at 14 May 2021 20:37:16
Severity	+ Unknown
Remote	+ Unknown
Type	+ Unknown
Description
References
Notes