CVE-2021-41217 log
Source |
|
Severity | Medium |
Remote | No |
Type | Denial of service |
Description | In TensorFlow before version 2.6.1, the process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not. This occurs because the code assumes that the first node in the pairing (e.g., an Enter node) always exists when encountering the second node (e.g., an Exit node). When this is not the case, parent is nullptr so dereferencing it causes a crash. |
Group | Package | Affected | Fixed | Severity | Status | Ticket |
---|---|---|---|---|---|---|
AVG-2529 | tensorflow | 2.6.0-6 | 2.6.1-1 | High | Fixed |
References |
---|
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5crj-c72x-m7gq https://github.com/tensorflow/tensorflow/commit/05cbebd3c6bb8f517a158b0155debb8df79017ff |