VDB

CVE-2021-41200

CVE-2021-41200 PUBLISHED CVSS 5.5 MEDIUM

TensorFlow is an open source platform for machine learning. In affected versions if `tf.summary.create_file_writer` is called with non-scalar arguments code crashes due to a `CHECK`-fail. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

EPSS 0.24% · 14.0th percentile

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.24%
14.0th percentile

Affected Products

VendorProductVersions
Bitnamitensorflow0, 2.5.0, 2.6.0
Bitnamitensorflow0, 2.5.0, 2.6.0

Timeline

  • Nov 5, 2021 CVE Published
  • Nov 6, 2021 EPSS Score
  • Jan 1, 2022 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 26, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Jun 19, 2022 EPSS Score
  • Aug 15, 2022 EPSS Score
  • Oct 10, 2022 EPSS Score
  • Dec 5, 2022 EPSS Score
  • Jan 30, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 50/day Open console ›