Lucene search

Veracode Vulnerability DatabaseVERACODE:32856

HistoryNov 09, 2021 - 1:01 p.m.

Denial Of Service (DoS)

2021-11-0913:01:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

JSON

tensorflow is vulnerable to denial of service. The vulnerability exists because adding shape checks for GPU TridiagonalMatMul op is not properly validated allowing invalid writes and reads from heap populated arrays which results in an application crash.

CPENameOperatorVersion
tensorflow-gpueq2.6.0
tensorflow-gpule2.5.1
tensorflow-gpule2.7.0rc1
tensorflow-gpule1.10.0
tensorflow-cpueq2.6.0
tensorflow-cpule2.4.3
tensorflow-cpule2.5.1
tensorflow-cpule2.7.0rc1
tensorflowle2.4.3
tensorflowle2.6.0

Name	Operator	Version
tensorflow-gpu	eq	2.6.0
tensorflow-gpu	le	2.5.1
tensorflow-gpu	le	2.7.0rc1
tensorflow-gpu	le	1.10.0
tensorflow-cpu	eq	2.6.0
tensorflow-cpu	le	2.4.3
tensorflow-cpu	le	2.5.1
tensorflow-cpu	le	2.7.0rc1
tensorflow	le	2.4.3
tensorflow	le	2.6.0

Rows per page:

1-10 of 241

References

github.com/tensorflow/tensorflow/commit/4d74d8a00b07441cba090a02e0dd9ed385145bf4

github.com/tensorflow/tensorflow/commit/4dddb2fd0b01cdd196101afbba6518658a2c9e07

github.com/tensorflow/tensorflow/commit/579261dcd446385831fe4f7457d802a59685121d

github.com/tensorflow/tensorflow/commit/68422b215e618df5ad375bcdc6d2052e9fd3080a

github.com/tensorflow/tensorflow/commit/da4aad5946be30e5f049920fa076e1f7ef021261

github.com/tensorflow/tensorflow/commit/e7f497570abb6b4ae5af4970620cd880e4c0c904

github.com/tensorflow/tensorflow/security/advisories/GHSA-pgcq-h79j-2f69

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

JSON

Related for VERACODE:32856