Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    speex, speex, speex, speex

    Summary

    Published
    10 Nov 2021
    UBUNTU-CVE-2020-23884
    No fix available
    Packages

    nomacs, nomacs, nomacs, nomacs, nomacs, nomacs, nomacs

    Summary

    Published
    10 Nov 2021
    USN-5138-1
    Fix available
    Packages

    python-py, python-py

    Summary

    python-py vulnerability

    Published
    10 Nov 2021
    GHSA-q9q6-f556-gpm7
    Fix available
    Packages

    starkbank-ecdsa

    Summary

    Improper Verification of Cryptographic Signature in starkbank-ecdsa

    Published
    10 Nov 2021
    GHSA-j3jw-j2j8-2wv9
    Fix available
    Packages

    starkbank-ecdsa

    Summary

    Improper Verification of Cryptographic Signature in starkbank-ecdsa

    Published
    10 Nov 2021
    GHSA-r28h-x6hv-2fq3
    Fix available
    Packages

    com.starkbank.ellipticcurve:starkbank-ecdsa

    Summary

    Improper Verification of Cryptographic Signature in starkbank-ecdsa

    Published
    10 Nov 2021
    GHSA-92vm-mxjf-jqf3
    Fix available
    Packages

    starkbank-ecdsa

    Summary

    Improper Verification of Cryptographic Signature in starkbank-ecdsa

    Published
    10 Nov 2021
    GHSA-g9wh-3vrx-r7hg
    Fix available
    Packages

    github.com/cloudflare/cfrpki

    Summary

    OctoRPKI crashes when processing GZIP bomb returned via malicious repository

    Published
    10 Nov 2021
    GHSA-g5gj-9ggf-9vmq
    Fix available
    Packages

    github.com/cloudflare/cfrpki

    Summary

    Infinite certificate chain depth results in OctoRPKI running forever

    Published
    10 Nov 2021
    GHSA-8cvr-4rrf-f244
    Fix available
    Packages

    github.com/cloudflare/cfrpki

    Summary

    Infinite open connection causes OctoRPKI to hang forever

    Published
    10 Nov 2021
    GHSA-5mxh-2qfv-4g7j
    Fix available
    Packages

    github.com/cloudflare/cfrpki

    Summary

    NUL character in ROA causes OctoRPKI to crash

    Published
    10 Nov 2021
    GHSA-cqh2-vc2f-q4fh
    Fix available
    Packages

    github.com/cloudflare/cfrpki

    Summary

    Arbitrary filepath traversal via URI injection

    Published
    10 Nov 2021
    GHSA-w6ww-fmfx-2x22
    Fix available
    Packages

    github.com/cloudflare/cfrpki

    Summary

    Misconfigured IP address field in ROA leads to OctoRPKI crash

    Published
    10 Nov 2021
    GHSA-qcj6-jqrg-4wp2
    Fix available
    Packages

    org.thymeleaf:thymeleaf-spring5

    Summary

    Template injection in thymeleaf-spring5

    Published
    10 Nov 2021
    GHSA-2r2v-q399-qq93
    Fix available
    Packages

    org.springframework.cloud:spring-cloud-gateway, org.springframework.cloud:spring-cloud-gateway

    Summary

    Request injection in Spring Cloud Gateway

    Published
    10 Nov 2021
    GHSA-57wx-m983-2f88
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Incomplete validation in boosted trees code

    Published
    10 Nov 2021
    GHSA-cq76-mxrc-vchh
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Crash in `tf.math.segment_*` operations

    Published
    10 Nov 2021
    GHSA-m539-j985-hcr8
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Crash in `max_pool3d` when size argument is 0 or negative

    Published
    10 Nov 2021
    GHSA-prcg-wp5q-rv7p
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes

    Published
    10 Nov 2021
    GHSA-2p25-55c9-h58q
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Overflow/crash in `tf.tile` when tiling tensor is large

    Published
    10 Nov 2021
    GHSA-5hx2-qx8j-qjqm
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Overflow/crash in `tf.image.resize` when size is large

    Published
    10 Nov 2021
    GHSA-gh8h-7j2j-qv4f
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Incomplete validation in `tf.summary.create_file_writer`

    Published
    10 Nov 2021
    GHSA-j86v-p27c-73fm
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Unitialized access in `EinsumHelper::ParseEquation`

    Published
    10 Nov 2021
    CVE-2021-42111
    No fix available
    Packages

    Summary

    Published
    10 Nov 2021
    GHSA-xrqm-fpgr-6hhx
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Overflow/crash in `tf.range`

    Published
    10 Nov 2021
    GHSA-7pxj-m4jf-r6h2
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Missing validation during checkpoint loading

    Published
    10 Nov 2021
    GHSA-786j-5qwq-r36x
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Segfault while copying constant resource tensor

    Published
    10 Nov 2021
    GHSA-49rx-x2rw-pc6f
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops

    Published
    10 Nov 2021
    GHSA-pgcq-h79j-2f69
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Incomplete validation of shapes in multiple TF ops

    Published
    10 Nov 2021
    GHSA-7v94-64hj-m82h
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    FPE in `ParallelConcat`

    Published
    10 Nov 2021
    GHSA-6hpv-v2rx-c5g6
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    FPE in convolutions with zero size filters

    Published
    10 Nov 2021
    GHSA-m342-ff57-4jcc
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`

    Published
    10 Nov 2021
    GHSA-cvgx-3v3q-m36c
    Fix available
    Packages

    tensorflow, tensorflow-cpu, tensorflow-gpu

    Summary

    Heap OOB in shape inference for `QuantizeV2`

    Published
    10 Nov 2021
    GHSA-fr77-rrx3-cp7g
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap OOB read in `tf.ragged.cross`

    Published
    10 Nov 2021
    GHSA-h67m-xg8f-fxcf
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Deadlock in mutually recursive `tf.function` objects

    Published
    10 Nov 2021
    GHSA-vwhq-49r4-gj9v
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Reference binding to `nullptr` in `tf.ragged.cross`

    Published
    10 Nov 2021
    GHSA-x3v8-c8qx-3j3r
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Null pointer exception in `DeserializeSparse`

    Published
    10 Nov 2021
    GHSA-3ff2-r28g-w7h9
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap buffer overflow in `Transpose`

    Published
    10 Nov 2021
    GHSA-5crj-c72x-m7gq
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Null pointer exception when `Exit` node is not preceded by `Enter` op

    Published
    10 Nov 2021
    GHSA-9crf-c6qr-r273
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Integer division by 0 in `tf.raw_ops.AllToAll`

    Published
    10 Nov 2021
    GHSA-4f99-p9c2-3j8x
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Undefined behavior via `nullptr` reference binding in sparse matrix multiplication

    Published
    10 Nov 2021
    GHSA-gpfh-jvf9-7wg5
    Fix available
    Packages

    tensorflow, tensorflow-cpu, tensorflow-gpu

    Summary

    Use after free / memory leak in `CollectiveReduceV2`

    Published
    10 Nov 2021
    GHSA-cqv6-3phm-hcwx
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Access to invalid memory during shape inference in `Cudnn*` ops

    Published
    10 Nov 2021
    GHSA-cpf4-wx82-gxp6
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Segfault due to negative splits in `SplitV`

    Published
    10 Nov 2021
    GHSA-f54p-f6jp-4rhr
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap OOB in `FusedBatchNorm` kernels

    Published
    10 Nov 2021
    GHSA-rg3m-hqc5-344v
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    `SparseFillEmptyRows` heap OOB

    Published
    10 Nov 2021
    GHSA-7r94-xv9v-63jw
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    A use of uninitialized value vulnerability in Tensorflow

    Published
    10 Nov 2021
    GHSA-374m-jm66-3vj8
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Heap OOB in `SparseBinCount`

    Published
    10 Nov 2021
    GHSA-j8c8-67vp-6mx7
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    Arbitrary memory read in `ImmutableConst`

    Published
    10 Nov 2021
    Packages

    vim-X11, vim-common, vim-enhanced, vim-filesystem, vim-minimal

    Summary

    Fixed CVEs in vim: CVE-2021-3872, CVE-2021-3903, CVE-2021-3875

    Published
    10 Nov 2021