Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-10605
HistorySep 20, 2022 - 12:00 a.m.

Google TensorFlow Conv2D Denial of Service Vulnerability

2022-09-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
20
google
tensorflow
conv2d
denial of service
vulnerability
machine learning
divide-by-zero
attack

EPSS

0.001

Percentile

35.2%

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial-of-service vulnerability exists in Google TensorFlow, which stems from the fact that if Conv2D is specified as an empty input and the filter and padding sizes are valid, the output is all zeros, which results in a divide-by-zero floating point An attacker can use this vulnerability to trigger a denial of service attack.

EPSS

0.001

Percentile

35.2%