Denial Of Service (DoS)

2021-05-1715:21:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

12.8%

JSON

tensorflow is vulnerable to denial of service. The vulnerability exists due to division by zero error in tf.raw_ops.MaxPoolGradWithArgmax which is caused by the failure to validate the batch dimension of the tensor is non-zero before dividing it.

CPENameOperatorVersion
tensorflow-gpule2.3.2
tensorflow-gpule2.2.2
tensorflow-gpule2.4.1
tensorflow-gpule2.5.0rc3
tensorflow-gpule2.1.3
tensorflow-cpule2.3.2
tensorflow-cpule2.2.2
tensorflow-cpule2.4.1
tensorflow-cpule2.5.0rc3
tensorflow-cpule2.1.3

Name	Operator	Version
tensorflow-gpu	le	2.3.2
tensorflow-gpu	le	2.2.2
tensorflow-gpu	le	2.4.1
tensorflow-gpu	le	2.5.0rc3
tensorflow-gpu	le	2.1.3
tensorflow-cpu	le	2.3.2
tensorflow-cpu	le	2.2.2
tensorflow-cpu	le	2.4.1
tensorflow-cpu	le	2.5.0rc3
tensorflow-cpu	le	2.1.3