Veracode Vulnerability DatabaseVERACODE:37161Denial Of Service (DoS)
EPSS
Percentile
40.1%
tensorflow is vulnerable to denial of service. The vulnerability exists in ImportNodes in functiondef_import.cc because the assertion fails on MLIR when empty edge names are given which causes an application crash.
References
github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ir/importexport/functiondef_import.cc
github.com/tensorflow/tensorflow/commit/4793245ae176f1e79ac1c6d011ffc4e84f660fc6
github.com/tensorflow/tensorflow/commit/74daac56d4a2c0def9484adb3f01dd09dcd16993
github.com/tensorflow/tensorflow/commit/9faf68af3605c6f24783e49412f19a930badd36b
github.com/tensorflow/tensorflow/commit/ad069af92392efee1418c48ff561fd3070a03d7b
github.com/tensorflow/tensorflow/pull/57409
github.com/tensorflow/tensorflow/pull/57410
github.com/tensorflow/tensorflow/pull/57412
github.com/tensorflow/tensorflow/security/advisories/GHSA-jvhc-5hhr-w3v5
Related
