Information Disclosure

2020-09-2804:06:46

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

59.1%

JSON

tensorflow is vulnerable to information disclosure. The vulnerability exists due to the lack of validation of the data_splits argument in tf.raw_ops.StringNGrams, resulting in a memory leak.

CPENameOperatorVersion
tensorflowle2.3.0
tensorflowle2.2.0
tensorflowle1.15.3
tensorflowle2.1.1
tensorflowle2.0.2
tensorflow-cpule1.15.0
tensorflow-cpule2.1.1
tensorflow-cpule2.3.0
tensorflow-cpule2.2.0
tensorflow-gpule2.3.0

Name	Operator	Version
tensorflow	le	2.3.0
tensorflow	le	2.2.0
tensorflow	le	1.15.3
tensorflow	le	2.1.1
tensorflow	le	2.0.2
tensorflow-cpu	le	1.15.0
tensorflow-cpu	le	2.1.1
tensorflow-cpu	le	2.3.0
tensorflow-cpu	le	2.2.0
tensorflow-gpu	le	2.3.0