tensorflow vulnerabilities (Azure Linux)
121 vulnerabilities.
-
tensorflowAzure Linux Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing 8.7 High -
tensorflowAzure Linux Lenient parsing of integers for response body and chunk framing 2.0 Low -
tensorflowAzure Linux tar filter allows writing outside destination via empty-named symlink 6.9 Medium -
tensorflowAzure Linux Distrust compromised intermediate certificates in crypto/x509 6.8 Medium -
tensorflowAzure Linux wolfSSL public-key pinning bypass 9.1 Critical -
tensorflowAzure Linux password leak in CURLINFO_EFFECTIVE_URL 7.5 High -
tensorflowAzure Linux curl_mime_free stack overflow by recursion 7.5 High -
tensorflowAzure Linux -J no-clobber guarantee bypassed with 103 early hints 7.5 High -
tensorflowAzure Linux TFTP direction confusion 8.1 High -
tensorflowAzure Linux FTP wildcard write callback mixup 9.1 Critical -
tensorflowAzure Linux knownhost callback mismatches key as missing 7.4 High -
tensorflowAzure Linux IMAP APPEND plus CRLF conversion command injection 8.1 High -
tensorflowAzure Linux HSTS response erases persisted entries 8.1 High -
tensorflowAzure Linux leaking host credentials to HTTP proxy 9.1 Critical -
tensorflowAzure Linux redirect to SFTP or SCP bypasses host verification 8.1 High -
tensorflowAzure Linux stale SigV4 headers sent unintended 8.1 High -
tensorflowAzure Linux info leak uploading over WebSockets with GnuTLS 8.1 High -
tensorflowAzure Linux Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session 9.1 Critical -
tensorflowAzure Linux HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
tensorflowAzure Linux Recognize yield as regexp preceder keyword in html/template 6.1 Medium -
tensorflowAzure Linux HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http 7.5 High -
tensorflowAzure Linux Excessive CPU consumption from repeated initial window changes in net/http 7.5 High -
tensorflowAzure Linux Lack of limit on size of parsed Range headers in net/http 7.5 High -
tensorflowAzure Linux Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
tensorflowAzure Linux HTTP/2 transport accepts malformed framing-related headers in net/http 7.5 High -
tensorflowAzure Linux HTTP/2 server memory exhaustion due to Trailer headers in net/http 7.5 High -
tensorflowAzure Linux HTTP/1 client connection desynchronization after CONNECT rejection in net/http 7.5 High -
tensorflowAzure Linux SSLContext.wrap_bio() missing validation of server_hostname parameter 7.6 High -
tensorflowAzure Linux Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory 5.9 Medium -
tensorflowAzure Linux urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory 8.9 High -
tensorflowAzure Linux urllib3: HTTPS proxy TLS configuration may be ignored or overridden 7.6 High -
tensorflowAzure Linux Werkzeug safe_join() allows Windows special device names 6.3 Medium -
tensorflowAzure Linux tarfile extraction filters allow file modification and content disclosure via hard link to symlink 8.4 High -
tensorflowAzure Linux domain-scoped PSL domain cookie 8.2 High -
tensorflowAzure Linux OpenSSL pinning bypass 7.5 High -
tensorflowAzure Linux Negotiate ambient user conn reuse 9.8 Critical -
tensorflowAzure Linux HTTP/2 server push UAF 9.1 Critical -
tensorflowAzure Linux OpenLDAP SASL authentication bypass 7.4 High -
tensorflowAzure Linux native CA store conn reuse 7.5 High -
tensorflowAzure Linux zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits 2.1 Low -
tensorflowAzure Linux pnggroup libpng pnm2png pnm2png.c do_pnm2png heap-based overflow 4.8 Medium -
tensorflowAzure Linux URLs in meta content attribute actions are not escaped in html/template 6.1 Medium -
tensorflowAzure Linux Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib 9.8 Critical -
tensorflowAzure Linux SourcelessFileLoader does not use io.open_code() 5.7 Medium -
tensorflowAzure Linux TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability 7.0 High -
tensorflowAzure Linux urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) 8.9 High -
tensorflowAzure Linux netrc and redirect credential leak 3.4 Low -
tensorflowAzure Linux HSTS subdomain overwrites parent cache entry 6.5 Medium -
tensorflowAzure Linux Regular-expression DoS when parsing TarFile headers 7.5 High -
tensorflowAzure Linux Infinite loop when iterating over zip archive entry names from zipfile.Path 8.7 High - Show olderLoading…