Lucene search
Veracode Vulnerability DatabaseVERACODE:34056HistoryFeb 08, 2022 - 7:00 a.m.
Remote Code Execution (RCE)
2022-02-0807:00:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.006 Low
EPSS
Percentile
78.2%
Tensorflow is vulnerable to remote code execution. The vulnerability exists due to a heap OOB write in Grappler allowing an attacker to use the set_output function to writes to an array at the specified index.
References
github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.h#L394
github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/graph_properties.cc#L1132-L1141
github.com/tensorflow/tensorflow/commit/97282c6d0d34476b6ba033f961590b783fa184cd
github.com/tensorflow/tensorflow/security/advisories/GHSA-5qw5-89mw-wcg2
Related
osv
osv
BIT-tensorflow-2022-23566
2024-03-06 11:15:20
PYSEC-2022-75
2022-02-04 23:15:00
Out of bounds write in Tensorflow
2022-02-09 23:55:43
cve
cve
CVE-2022-23566
2022-02-04 23:15:14
prion
prion
Heap overflow
2022-02-04 23:15:00
cnvd
cnvd
Google Tensorflow Buffer Overflow Vulnerability (CNVD-2022-09888)
2022-02-09 00:00:00
cvelist
cvelist
CVE-2022-23566 Out of bounds write in Tensorflow
2022-02-04 22:32:33
nvd
nvd
CVE-2022-23566
2022-02-04 23:15:14
github
github
Out of bounds write in Tensorflow
2022-02-09 23:55:43
