Lucene search
PRIOn knowledge basePRION:CVE-2022-41885HistoryNov 18, 2022 - 10:15 p.m.
Stack overflow
2022-11-1822:15:00
PRIOn knowledge base
www.prio-n.com
4
tensorflow
machine learning
overflow issue
fusedresizeandpadconv2d
github commit
patch
cherrypick
nvd
0.001 Low
EPSS
Percentile
43.6%
TensorFlow is an open source platform for machine learning. When tf.raw_ops.FusedResizeAndPadConv2D is given a large tensor shape, it overflows. We have patched the issue in GitHub commit d66e1d568275e6a2947de97dca7a102a211e01ce. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tensorflow | ge | 2.8.0 | |
| tensorflow | lt | 2.8.1 | |
| tensorflow | ge | 2.9.0 | |
| tensorflow | lt | 2.9.1 | |
| tensorflow | lt | 2.7.4 | |
| tensorflow | eq | 2.10.0 rc0 | |
| tensorflow | eq | 2.10.0 rc1 | |
| tensorflow | eq | 2.10.0 rc2 | |
| tensorflow | eq | 2.10.0 rc3 |
Related
cvelist
cvelist
CVE-2022-41885 Overflow in `FusedResizeAndPadConv2D` in Tensorflow
2022-11-18 00:00:00
cnvd
cnvd
osv
osv
BIT-tensorflow-2022-41885
2024-03-06 11:11:28
Overflow in `FusedResizeAndPadConv2D`
2022-11-21 20:40:42
CVE-2022-41885
2022-11-18 22:15:14
nvd
nvd
CVE-2022-41885
2022-11-18 22:15:14
cve
cve
CVE-2022-41885
2022-11-18 22:15:14
veracode
veracode
Denial Of Service (DoS)
2022-11-21 11:51:23
github
github
Overflow in `FusedResizeAndPadConv2D`
2022-11-21 20:40:42
ibm
ibm
nessus
nessus
TensorFlow < 2.9.3 Multiple Vulnerabilities
2024-05-24 00:00:00
TensorFlow < 2.10.1 Multiple Vulnerabilities
2024-05-20 00:00:00