Lucene search

K
osvGoogleOSV:BIT-TENSORFLOW-2022-29200
HistoryMar 06, 2024 - 11:14 a.m.

BIT-tensorflow-2022-29200

2024-03-0611:14:30
Google
osv.dev
4
tensorflow
machine learning
denial of service

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.1%

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of tf.raw_ops.LSTMBlockCell does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack. The code does not validate the ranks of any of the arguments to this API call. This results in CHECK-failures when the elements of the tensor are accessed. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.1%

Related for OSV:BIT-TENSORFLOW-2022-29200