Denial Of Service (DoS)

2021-05-1703:52:12

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

12.8%

JSON

tensorflow is vulnerable to denial of service. An attacker is able to trigger an FPE runtime error in tf.raw_ops.Reverse as it performs a division based on the first dimension of the tensor argument.

CPENameOperatorVersion
tensorflowle2.3.2
tensorflowle2.2.2
tensorflowle2.4.1
tensorflowle2.5.0rc3
tensorflowle2.1.3
tensorflow-cpule2.3.2
tensorflow-cpule2.2.2
tensorflow-cpule2.4.1
tensorflow-cpule2.5.0rc3
tensorflow-cpule2.1.3

Name	Operator	Version
tensorflow	le	2.3.2
tensorflow	le	2.2.2
tensorflow	le	2.4.1
tensorflow	le	2.5.0rc3
tensorflow	le	2.1.3
tensorflow-cpu	le	2.3.2
tensorflow-cpu	le	2.2.2
tensorflow-cpu	le	2.4.1
tensorflow-cpu	le	2.5.0rc3
tensorflow-cpu	le	2.1.3