漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Vulnerability Description
TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of TensorFlow. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of plugins. The application loads plugins from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-25480.
CVSS Information
N/A
Vulnerability Type
对搜索路径元素未加控制
Vulnerability Title
TensorFlow 代码问题漏洞
Vulnerability Description
TensorFlow是TensorFlow开源的一套用于机器学习的端到端开源平台。 TensorFlow存在代码问题漏洞，该漏洞源于插件处理不当，应用程序从不安全的位置加载插件，可能导致本地攻击者提升权限并在目标用户环境中执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A