There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker
    can cause undefined behavior via binding a reference to null pointer in `tf.raw_ops.SparseFillEmptyRows`.
    The shape inference [implementation](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61
    a16d161b1964f15f4/tensorflow/core/ops/sparse_ops.cc#L608-L634) does not validate that the input arguments
    are not empty tensors. We have patched the issue in GitHub commit
    578e634b4f1c1c684d4b4294f9e5281b2133b3ed. The fix will be included in TensorFlow 2.6.0. We will also
    cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also
    affected and still in supported range. (CVE-2021-37676)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10014-1 advisory.

    Update to TF2 2.6.0 which fixes multiple CVEs (boo#1189423).

    - Introduction of bazel6.3 and basel-skylib1.0.3 as build       dependencies.
      The latter has been adapted to all a version in its package       name (if %set_ver_suffix is set to 1). This allows multiple       versions to exist for one product (not installed).
      NOTE: basel-skylib1.0.3 does not exist in oS:Factory:
      basel-skylib in oS:Factory - the base version - is 1.0.3.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
419149	SCA: security update for tensorflow, tensorflow-cpu, tensorflow-gpu (GHSA-v768-w7m9-2vmm)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	high
419149	SCA: security update for tensorflow, tensorflow-cpu, tensorflow-gpu (GHSA-v768-w7m9-2vmm)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	high
162400	openSUSE 15 セキュリティ更新 : tensorflow2 (openSUSE-SU-2022:10014-1)	Nessus	SuSE Local Security Checks	2022/6/19	2024/7/10	high
162400	openSUSE 15 Security Update : tensorflow2 (openSUSE-SU-2022:10014-1)	Nessus	SuSE Local Security Checks	2022/6/19	2024/7/10	high

偵測

搜尋 Plugin

high

high

high

high