From 742df8d01acbb38a5114075155301c2e7f963f4c Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 26 Aug 2024 19:06:03 +0000 Subject: [PATCH] Publish GHSA-mfg7-x5m7-6p8w --- .../GHSA-mfg7-x5m7-6p8w.json | 35 +++++++++++++++++-- 1 file changed, 33 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2019/04/GHSA-mfg7-x5m7-6p8w/GHSA-mfg7-x5m7-6p8w.json b/advisories/github-reviewed/2019/04/GHSA-mfg7-x5m7-6p8w/GHSA-mfg7-x5m7-6p8w.json index 7d14259c595..2df4c51dcc4 100644 --- a/advisories/github-reviewed/2019/04/GHSA-mfg7-x5m7-6p8w/GHSA-mfg7-x5m7-6p8w.json +++ b/advisories/github-reviewed/2019/04/GHSA-mfg7-x5m7-6p8w/GHSA-mfg7-x5m7-6p8w.json @@ -1,17 +1,21 @@ { "schema_version": "1.4.0", "id": "GHSA-mfg7-x5m7-6p8w", - "modified": "2021-08-03T21:26:24Z", + "modified": "2024-08-26T19:04:36Z", "published": "2019-04-30T15:37:17Z", "aliases": [ "CVE-2019-9635" ], "summary": "NULL Pointer Dereference in Google TensorFlow", - "details": "NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.", + "details": "NULL pointer dereference in Google TensorFlow before 1.12.1 could cause a denial of service via an invalid GIF file.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -33,6 +37,25 @@ ] } ] + }, + { + "package": { + "ecosystem": "PyPI", + "name": "tensorflow-gpu" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "1.0.0" + }, + { + "fixed": "1.12.1" + } + ] + } + ] } ], "references": [ @@ -40,6 +63,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9635" }, + { + "type": "WEB", + "url": "https://github.com/tensorflow/tensorflow/commit/e41cb124cd0b325821af85cdacd9d8a12e206418" + }, + { + "type": "PACKAGE", + "url": "https://github.com/tensorflow/tensorflow" + }, { "type": "WEB", "url": "https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2019-001.md"