Denial Of Service (DoS)

2022-02-0805:47:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

tensorflow

dos

vulnerability

shape_inference

assertion

dtype

elements

shape

EPSS

0.001

Percentile

32.8%

JSON

Tensorflow is vulnerable to denial of service. The vulnerability exists due to a lack of santization of the CHECK assertion in shape_inference.cc file allowing an attacker to crash the system by injecting invalid dtype, 0 elements or an invalid shape.