Tagged “osv”
CVEs tagged osv, newest first.
7207 CVEsRSS
CVE-2021-41190Low· 3.0Clarify Content-Type handling
Clarify Content-Type handling
CVE-2021-41254High· 8.8Privilege escalation to cluster admin on multi-tenant environments
Privilege escalation to cluster admin on multi-tenant environments
CVE-2021-22565Medium· 6.5Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server
Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server
CVE-2021-3911Medium· 4.2Misconfigured IP address field in ROA leads to OctoRPKI crash
Misconfigured IP address field in ROA leads to OctoRPKI crash
CVE-2021-41230Medium· 5.3OIDC claims not updated from Identity Provider in Pomerium
OIDC claims not updated from Identity Provider in Pomerium
CVE-2021-3912Medium· 4.2OctoRPKI crashes when processing GZIP bomb returned via malicious repository
OctoRPKI crashes when processing GZIP bomb returned via malicious repository
CVE-2021-3908Medium· 5.9Infinite certificate chain depth results in OctoRPKI running forever
Infinite certificate chain depth results in OctoRPKI running forever
CVE-2021-3909Medium· 4.4Infinite open connection causes OctoRPKI to hang forever
Infinite open connection causes OctoRPKI to hang forever
CVE-2021-3910High· 7.5NUL character in ROA causes OctoRPKI to crash
NUL character in ROA causes OctoRPKI to crash
CVE-2021-41202Medium· 5.5Overflow/crash in `tf.range`
Overflow/crash in `tf.range`
CVE-2021-41215Medium· 5.5Null pointer exception in `DeserializeSparse`
Null pointer exception in `DeserializeSparse`
CVE-2021-41214High· 7.8Reference binding to `nullptr` in `tf.ragged.cross`
Reference binding to `nullptr` in `tf.ragged.cross`
CVE-2021-41224High· 7.1`SparseFillEmptyRows` heap OOB
`SparseFillEmptyRows` heap OOB
CVE-2021-41197Medium· 5.5Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes
Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes
CVE-2021-41206High· 7.0Incomplete validation of shapes in multiple TF ops
Incomplete validation of shapes in multiple TF ops
CVE-2021-41196Medium· 5.5Crash in `max_pool3d` when size argument is 0 or negative
Crash in `max_pool3d` when size argument is 0 or negative
CVE-2021-41210High· 7.1Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`
Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`
CVE-2021-41227Medium· 6.6Arbitrary memory read in `ImmutableConst`
Arbitrary memory read in `ImmutableConst`
CVE-2021-41201High· 7.8Unitialized access in `EinsumHelper::ParseEquation`
Unitialized access in `EinsumHelper::ParseEquation`
CVE-2021-41213Medium· 5.5Deadlock in mutually recursive `tf.function` objects
Deadlock in mutually recursive `tf.function` objects
CVE-2021-41220High· 7.8Use after free / memory leak in `CollectiveReduceV2`
Use after free / memory leak in `CollectiveReduceV2`
CVE-2021-41200Medium· 5.5Incomplete validation in `tf.summary.create_file_writer`
Incomplete validation in `tf.summary.create_file_writer`
CVE-2021-41212High· 7.1Heap OOB read in `tf.ragged.cross`
Heap OOB read in `tf.ragged.cross`
CVE-2021-41223High· 7.1Heap OOB in `FusedBatchNorm` kernels
Heap OOB in `FusedBatchNorm` kernels
CVE-2021-41211High· 7.1Heap OOB in shape inference for `QuantizeV2`
Heap OOB in shape inference for `QuantizeV2`
CVE-2021-41221High· 7.8Access to invalid memory during shape inference in `Cudnn*` ops
Access to invalid memory during shape inference in `Cudnn*` ops
CVE-2021-41195Medium· 5.5Crash in `tf.math.segment_*` operations
Crash in `tf.math.segment_*` operations
CVE-2021-41222Medium· 5.5Segfault due to negative splits in `SplitV`
Segfault due to negative splits in `SplitV`
CVE-2021-41218Medium· 5.5Integer division by 0 in `tf.raw_ops.AllToAll`
Integer division by 0 in `tf.raw_ops.AllToAll`
CVE-2021-41207Medium· 5.5FPE in `ParallelConcat`
FPE in `ParallelConcat`