Skip to content
OpenAdvisories

Archive

21 November 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low —

    `CHECK` failure in `SobolSample` via missing validation

    ### Impact Another instance of CVE-2022-35935, where `SobolSample` is vulnerable to a denial of service via assumed scalar inputs, was found and fixed. ```python import tensorflow as tf tf.raw_ops.SobolSample(dim=tf.constant([1,0]), num_results=tf.constant([1…

  • Low —

    `CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode

    ### Impact Another instance of CVE-2022-35991, where `TensorListScatter` and `TensorListScatterV2` crash via non scalar inputs in`element_shape`, was found in eager mode and fixed. ```python import tensorflow as tf arg_0=tf.random.uniform(shape=(2, 2, 2), dty…

  • Low 2.6

    iPXE TLS tls.c tls_new_ciphertext information exposure

    A vulnerability was found in iPXE. It has been declared as problematic. This vulnerability affects the function tls_new_ciphertext of the file src/net/tls.c of the component TLS. The manipulation of the argument pad_len leads to information exposure through d…