Lucene search
K

7 matches found

CNVD
CNVD
added 2022/09/20 12:0 a.m.27 views

Google TensorFlow Denial of Service Vulnerability (CNVD-2023-10608)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial-of-service vulnerability exists in Google TensorFlow, which stems from the fact that FakeQuantWithMinMaxVars will fail to assert if it is given a tensor of non-zero rank min or max. An attacker...

7.5CVSS4.7AI score0.00064EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2022/09/16 10:20 p.m.27 views

TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVars`

Impact If FakeQuantWithMinMaxVars is given min or max tensors of a nonzero rank, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf numbits = 8 narrowrange = False inputs = tf.constant0, shape=2,3, dtype=tf.float32 min = tf.constant0,...

7.5CVSS7.5AI score0.00064EPSS
Exploits0References5Affected Software3
OSV
OSV
added 2022/09/16 8:50 p.m.21 views

CVE-2022-35971 `CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlow

TensorFlow is an open source platform for machine learning. If FakeQuantWithMinMaxVars is given min or max tensors of a nonzero rank, it results in a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

5.9CVSS7.6AI score0.00064EPSS
Exploits0References4
CVE
CVE
added 2022/09/16 8:50 p.m.82 views

CVE-2022-35971

CVE-2022-35971 affects TensorFlow: a denial-of-service risk when FakeQuantWithMinMaxVars receives min/max tensors of nonzero rank, causing a CHECK failure. Root cause: input validation in FakeQuantWithMinMaxVars leads to DoS. Known impact: remote attacker could trigger DoS via this path; exploita...

7.5CVSS6.4AI score0.00064EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/09/16 8:50 p.m.20 views

CVE-2022-35971 `CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlow

TensorFlow is an open source platform for machine learning. If FakeQuantWithMinMaxVars is given min or max tensors of a nonzero rank, it results in a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

5.9CVSS7.7AI score0.00064EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2022/09/16 8:50 p.m.1 views

CVE-2022-35971

TensorFlow is an open source platform for machine learning. If FakeQuantWithMinMaxVars is given min or max tensors of a nonzero rank, it results in a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

7.5CVSS6.8AI score0.00064EPSS
Exploits0
CNNVD
CNNVD
added 2022/09/16 12:0 a.m.2 views

Google TensorFlow 安全漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial-of-service vulnerability exists in Google TensorFlow, which stems from the fact that FakeQuantWithMinMaxVars will fail to assert if it is given a tensor of non-zero rank min or max. An attacker...

7.5CVSS6.6AI score0.00064EPSS
Exploits0References3
Rows per page
Query Builder