Denial Of Service (DoS)

2021-05-1707:13:21

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

12.8%

JSON

tensorflow is vulnerable to denial of service. A double redirection to access an element of an array allocated on the heap occurs when CHECK-fail in converting sparse tensors to CSR Sparse matrices in SparseTensorToCSRSparseMatrix, allowing an attacker to crash the application.

CPENameOperatorVersion
tensorflowle2.3.2
tensorflowle2.2.2
tensorflowle2.4.1
tensorflowle2.5.0rc3
tensorflowle2.1.3
tensorflow-gpule2.3.2
tensorflow-gpule2.2.2
tensorflow-gpule2.4.1
tensorflow-gpule2.5.0rc3
tensorflow-gpule2.1.3

Name	Operator	Version
tensorflow	le	2.3.2
tensorflow	le	2.2.2
tensorflow	le	2.4.1
tensorflow	le	2.5.0rc3
tensorflow	le	2.1.3
tensorflow-gpu	le	2.3.2
tensorflow-gpu	le	2.2.2
tensorflow-gpu	le	2.4.1
tensorflow-gpu	le	2.5.0rc3
tensorflow-gpu	le	2.1.3