Lucene search
K

6 matches found

OSV
OSV
added 2022/05/24 10:5 p.m.0 views

GHSA-FV25-WRFF-WF86 Missing validation causes denial of service via `GetSessionTensor`

Impact The implementation of tf.rawops.GetSessionTensor does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf handle = tf.constant"", shape=0, dtype=tf.string...

5.5CVSS5.8AI score0.00143EPSS
Exploits1References9
Github Security Blog
Github Security Blog
added 2022/05/24 10:5 p.m.30 views

Missing validation causes denial of service via `GetSessionTensor`

Impact The implementation of tf.rawops.GetSessionTensor does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf handle = tf.constant"", shape=0, dtype=tf.string...

5.5CVSS6AI score0.00143EPSS
Exploits1References9Affected Software3
CVE
CVE
added 2022/05/20 8:50 p.m.105 views

CVE-2022-29191

CVE-2022-29191 affects TensorFlow: the implementation of tf.raw_ops.GetSessionTensor does not fully validate input arguments, causing a CHECK failure and enabling a denial of service on a local attacker. Affected versions are prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4; a patch is included in those v...

5.5CVSS5.4AI score0.00143EPSS
Exploits1References7Affected Software1
OSV
OSV
added 2022/05/20 8:50 p.m.14 views

CVE-2022-29191 Missing validation causes denial of service via `GetSessionTensor` in TensorFlow

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of tf.rawops.GetSessionTensor does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack...

5.5CVSS5.2AI score0.00143EPSS
Exploits1References9
Vulnrichment
Vulnrichment
added 2022/05/20 8:50 p.m.5 views

CVE-2022-29191 Missing validation causes denial of service via `GetSessionTensor` in TensorFlow

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of tf.rawops.GetSessionTensor does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack...

5.5CVSS5.6AI score0.00143EPSS
Exploits1References7
CNNVD
CNNVD
added 2022/05/20 12:0 a.m.2 views

Google TensorFlow输入验证错误漏洞

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to input validation errors in versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, stemming from tf.rawops GetSessionTensor does not fully validate the input parameters and can be exploited to...

5.5CVSS5.6AI score0.00143EPSS
Exploits1References9
Rows per page
Query Builder