Veracode Vulnerability DatabaseVERACODE:34004Denial Of Service (DoS)
EPSS
Percentile
76.8%
tensorflow is vulnerable to denial of service. The vulnerability exists due to a lack of validation on the value of batch_dim and can result in a heap OOB read causing the system to crash.
References
github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/framework/shape_inference.h#L415-L428
github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/ops/array_ops.cc#L1636-L1671
github.com/tensorflow/tensorflow/commit/37c01fb5e25c3d80213060460196406c43d31995
github.com/tensorflow/tensorflow/pull/53876/commits/7c2ae847e7d0806d94996ccdac08eded524a35a4
github.com/tensorflow/tensorflow/pull/53877/commits/66ea7f8a4de2db510bba942966572e54c35cc646
github.com/tensorflow/tensorflow/pull/53878/commits/8e7a27c769de3df3341c4c4be5db409fd3cf81a5
github.com/tensorflow/tensorflow/security/advisories/GHSA-6gmv-pjp9-p8w8
Related
