CVE-2023-25662
TensorFlow vulnerable to integer overflow in EditDistance
Résumé
TensorFlow vulnerable to integer overflow in EditDistance
Description d'origine
La description telle que publiée par la source (souvent en anglais).
TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 are vulnerable to integer overflow in EditDistance. A fix is included in TensorFlow version 2.12.0 and version 2.11.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
PyPI
tensorflow
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1"}]}]
PyPI
tensorflow-cpu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1"}]}]
PyPI
tensorflow-gpu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.1"}]}]
Bitnami
tensorflow
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.12.0"}]}]
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com