Denial Of Service (DoS)

2022-02-0717:11:03

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

52.0%

JSON

Tensorflow is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization in the BiasAndClamp implementation allowing an attacker to crash the system by injecting bias_size set to zero.

CPENameOperatorVersion
tensorflow-gpule2.6.2
tensorflow-gpule2.7.0
tensorflow-gpule2.5.2
tensorflow-cpule2.6.2
tensorflow-cpule2.7.0
tensorflow-cpule2.5.2
tensorflowle2.5.2
tensorflowle2.7.0
tensorflowle2.6.2
tensorflow-gpule2.6.2

Name	Operator	Version
tensorflow-gpu	le	2.6.2
tensorflow-gpu	le	2.7.0
tensorflow-gpu	le	2.5.2
tensorflow-cpu	le	2.6.2
tensorflow-cpu	le	2.7.0
tensorflow-cpu	le	2.5.2
tensorflow	le	2.5.2
tensorflow	le	2.7.0
tensorflow	le	2.6.2
tensorflow-gpu	le	2.6.2