Lucene search
Veracode Vulnerability DatabaseVERACODE:34085HistoryFeb 08, 2022 - 11:20 a.m.
Denial Of Service (DoS)
2022-02-0811:20:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
denial of service
tensorflow
vulnerability
savedmodel alteration
check failures
EPSS
0.002
Percentile
51.9%
tensorflow is vulnerable to denial of service. An attacker can send a malicious input which alters a SavedModel such that SafeToRemoveIdentity, triggering CHECK failures.
References
github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/dependency_optimizer.cc#L59-L98
github.com/tensorflow/tensorflow/commit/92dba16749fae36c246bec3f9ba474d9ddeb7662
github.com/tensorflow/tensorflow/commit/ad36151cbc1d14f625e37ff0f3be0d4b61e39467
github.com/tensorflow/tensorflow/security/advisories/GHSA-5f2r-qp73-37mr
Related
osv
osv
CVE-2022-23579
2022-02-04 23:15:14
BIT-tensorflow-2022-23579
2024-03-06 11:15:02
PYSEC-2022-88
2022-02-04 23:15:00
nvd
nvd
CVE-2022-23579
2022-02-04 23:15:14
cnvd
cnvd
Google Tensorflow has an unspecified vulnerability (CNVD-2022-09882)
2022-02-09 00:00:00
prion
prion
Stack overflow
2022-02-04 23:15:00
cvelist
cvelist
cve
cve
CVE-2022-23579
2022-02-04 23:15:14
github
github
`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
2022-02-10 00:33:29
