Denial Of Service (DoS)

2022-02-0409:21:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

52.0%

JSON

tensorflow is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization on the division operation in the convolution parameters allowing an attacker to crash the system via a maliciously crafted TFLite model.

CPENameOperatorVersion
tensorflow-cpule2.6.2
tensorflow-cpule2.7.1
tensorflow-cpule2.5.2
tensorflow-gpule2.5.2
tensorflow-gpule2.7.0
tensorflow-gpule2.6.2
tensorflowle2.5.2
tensorflowle2.7.0
tensorflowle2.6.2
tensorflow-cpule2.6.2

Name	Operator	Version
tensorflow-cpu	le	2.6.2
tensorflow-cpu	le	2.7.1
tensorflow-cpu	le	2.5.2
tensorflow-gpu	le	2.5.2
tensorflow-gpu	le	2.7.0
tensorflow-gpu	le	2.6.2
tensorflow	le	2.5.2
tensorflow	le	2.7.0
tensorflow	le	2.6.2
tensorflow-cpu	le	2.6.2