漏洞处理CVE-2021-29556

【任务类型】CVE处理
【任务描述】
漏洞编号：CVE-2021-29556
漏洞归属组件：tensorflow
漏洞归属的版本：2.3.1
CVSS V3.0分值：
BaseScore：5.5 Medium
Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
漏洞简述：
TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.raw_ops.Reverse. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/36229ea9e9451dac14a8b1f4711c435a1d84a594/tensorflow/core/kernels/reverse_op.cc#L75-L76) performs a division based on the first dimension of the tensor argument. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

【参考资料】
| 序号 | 文档                                                         | 视频讲解                                                     |
| ---- | ------------------------------------------------------------ | ------------------------------------------------------------ |
| 1    | [RPM软件包简介](https://bbs.huaweicloud.com/forum/forum.php?mod=viewthread&tid=126361) | [SPEC文件介绍 （06:13）](https://www.bilibili.com/video/BV1Q84y1F79M) |
| 2    | [SPEC文件介绍](https://bbs.huaweicloud.com/forum/forum.php?mod=viewthread&tid=126363) | [手动验证RPM的方法 （02:50）](https://www.bilibili.com/video/BV1A64y117ws) |
| 3    | [如何处理一个CVE?](https://bbs.huaweicloud.com/forum/forum.php?mod=viewthread&tid=126353) | [cve漏洞处理流程 （15:32）](https://www.bilibili.com/video/BV1vy4y1s7Nr) ||

【分值】
  紧急程度：低（1分）
  难易程度：简单（1分）

src-openEuler/tensorflow

内容风险标识

评论 (24)

src-openEuler/tensorflow .gitee-modal { width: 500px !important; }

内容风险标识