PYSEC-2021-395
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow/PYSEC-2021-395.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2021-395
- Aliases
- Published
- 2021-11-05T22:15:00Z
- Modified
- 2023-12-06T01:01:33.868373Z
- Summary
- [none]
- Details
-
TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the
tf.rangekernel, there is a conditional statement of typeint64 = condition ? int64 : double. Due to C++ implicit conversion rules, both branches of the condition will be cast todoubleand the result would be truncated before the assignment. This result in overflows. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range. - References
-
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xrqm-fpgr-6hhx
- https://github.com/tensorflow/tensorflow/commit/1b0e0ec27e7895b9985076eab32445026ae5ca94
- https://github.com/tensorflow/tensorflow/issues/46912
- https://github.com/tensorflow/tensorflow/issues/46889
- https://github.com/tensorflow/tensorflow/commit/6d94002a09711d297dbba90390d5482b76113899
Affected packages
PyPI / tensorflow
Package
- Name
- tensorflow
- View open source insights on deps.dev
- Purl
- pkg:pypi/tensorflow
Affected ranges
- Type
- GIT
- Repo
- https://github.com/tensorflow/tensorflow
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.4.4Introduced2.5.0Fixed2.5.2Introduced2.6.0Fixed2.6.1Introduced2.7.0rc0Fixed2.7.0
Affected versions
0.*
0.12.0
0.12.1
1.*
1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.4.1
1.5.0
1.5.1
1.6.0
1.7.0
1.7.1
1.8.0
1.9.0
1.10.0
1.10.1
1.11.0
1.12.0
1.12.2
1.12.3
1.13.1
1.13.2
1.14.0
1.15.0
1.15.2
1.15.3
1.15.4
1.15.5
2.*
2.0.0
2.0.1
2.0.2
2.0.3
2.0.4
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0rc0
2.2.0rc1
2.2.0rc2
2.2.0rc3
2.2.0rc4
2.2.0
2.2.1
2.2.2
2.2.3
2.3.0rc0
2.3.0rc1
2.3.0rc2
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.4.0rc0
2.4.0rc1
2.4.0rc2
2.4.0rc3
2.4.0rc4
2.4.0
2.4.1
2.4.2
2.4.3
2.5.0
2.5.1
2.6.0
2.7.0rc0
2.7.0rc1