---

CVE-2021-41217 - log back

CVE-2021-41217 created at 06 Nov 2021 00:14:30
Severity	+ Medium
Remote	+ Local
Type	+ Denial of service
Description	+ In TensorFlow before version 2.6.1, the process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not. This occurs because the code assumes that the first node in the pairing (e.g., an Enter node) always exists when encountering the second node (e.g., an Exit node). When this is not the case, parent is nullptr so dereferencing it causes a crash.
References	+ https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5crj-c72x-m7gq + https://github.com/tensorflow/tensorflow/commit/05cbebd3c6bb8f517a158b0155debb8df79017ff
Notes