Denial Of Service (DoS)

2022-02-0808:37:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

52.0%

JSON

Tensorflow is vulnerable to denial of service. An attacker may exploit the vulnerability by inputting a large value to num_dim causing the system to crash by allocating a large vector based on that value.

CPENameOperatorVersion
tensorflow-gpule2.5.2
tensorflow-gpule2.7.0
tensorflow-gpule2.6.2
tensorflow-cpule2.5.2
tensorflow-cpule2.7.0
tensorflow-cpule2.6.2
tensorflowle2.5.2
tensorflowle2.7.0
tensorflowle2.6.2
tensorflow-gpule2.5.2

Name	Operator	Version
tensorflow-gpu	le	2.5.2
tensorflow-gpu	le	2.7.0
tensorflow-gpu	le	2.6.2
tensorflow-cpu	le	2.5.2
tensorflow-cpu	le	2.7.0
tensorflow-cpu	le	2.6.2
tensorflow	le	2.5.2
tensorflow	le	2.7.0
tensorflow	le	2.6.2
tensorflow-gpu	le	2.5.2