CVE-2022-29213

Description

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the tf.compat.v1.signal.rfft2d and tf.compat.v1.signal.rfft3d lack input validation and under certain condition can result in crashes (due to CHECK-failures). Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.084

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities are fixed in Python-tensorflow 2.6.4	Windows
Multiple vulnerabilities are fixed in Python-tensorflow 2.7.2	Windows
Multiple vulnerabilities are fixed in Python-tensorflow 2.8.1	Windows
Multiple vulnerabilities are fixed in Python-tensorflow-cpu 2.6.4	Windows
Multiple vulnerabilities are fixed in Python-tensorflow-cpu 2.7.2	Windows
Multiple vulnerabilities are fixed in Python-tensorflow-cpu 2.8.1	Windows
Multiple vulnerabilities are fixed in Python-tensorflow-gpu 2.6.4	Windows
Multiple vulnerabilities are fixed in Python-tensorflow-gpu 2.7.2	Windows
Multiple vulnerabilities are fixed in Python-tensorflow-gpu 2.8.1	Windows
Multiple vulnerabilities are fixed in Python-tensorflow for linux 2.6.4	Linux
Multiple vulnerabilities are fixed in Python-tensorflow for linux 2.7.2	Linux
Multiple vulnerabilities are fixed in Python-tensorflow for linux 2.8.1	Linux
Multiple vulnerabilities are fixed in Python-tensorflow-cpu for linux 2.6.4	Linux
Multiple vulnerabilities are fixed in Python-tensorflow-cpu for linux 2.7.2	Linux
Multiple vulnerabilities are fixed in Python-tensorflow-cpu for linux 2.8.1	Linux
Multiple vulnerabilities are fixed in Python-tensorflow-gpu for linux 2.6.4	Linux
Multiple vulnerabilities are fixed in Python-tensorflow-gpu for linux 2.7.2	Linux
Multiple vulnerabilities are fixed in Python-tensorflow-gpu for linux 2.8.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234