GitHub Advisoryadvisory · PyPI

GHSA-m2f8-v8q4-3m59 Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

MEDIUM Published 2023-08-11 Modified 2023-09-01 Official page ↗
Aliases
CVE-2023-27506
Ecosystem
PyPI
Packages
intel-tensorflow, tensorflow-intel, intel-tensorflow-avx512
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L
Weaknesses
CWE-119
Reviewed
2023-09-01

Affected packages

• PyPI intel-tensorflow: < 2.12 → fixed in 2.12 • PyPI tensorflow-intel: < 2.12 → fixed in 2.12 • PyPI intel-tensorflow-avx512: < 2.12 → fixed in 2.12

Description

Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.

Related

Alias · CVE (1)

  • CVE-2023-27506 Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to… vulnerability

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References