AZL-31206

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-31206.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-31206

Upstream

CVE-2023-25801

Published

2023-03-25T00:15:08Z

Modified

2026-04-21T04:26:09.241410Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

CVE-2023-25801 affecting package tensorflow for versions less than 2.11.1-1

Details

TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, nn_ops.fractional_avg_pool_v2 and nn_ops.fractional_max_pool_v2 require the first and fourth elements of their parameter pooling_ratio to be equal to 1.0, as pooling on batch and channel dimensions is not supported. A fix is included in TensorFlow 2.12.0 and 2.11.1.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-25801

Affected packages

Azure Linux:2 / tensorflow

Package

Name: tensorflow
Purl: pkg:rpm/azure-linux/tensorflow

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.11.1-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-31206.json"