Veracode Vulnerability DatabaseVERACODE:37189Denial Of Service (DoS)
EPSS
Percentile
35.2%
tensorflow is vulnerable to denial of service. The vulnerability exists in Compute function of pooling_ops_3d.cc because it doesn’t properly validate the orig_input_shape input which allows an attacker to bypass inputs which result in a check failure causing an application crash.
References
github.com/tensorflow/tensorflow/commit/5a37416fb95a20073c43d8b8591ea161fd3745de
github.com/tensorflow/tensorflow/commit/9178ac9d6389bdc54638ab913ea0e419234d14eb
github.com/tensorflow/tensorflow/commit/a456d6f22857909be78d4daf1c23ebd41d49601e
github.com/tensorflow/tensorflow/commit/c7801a1aa1da9612b69977bf3ae226175336077d
github.com/tensorflow/tensorflow/pull/57247
github.com/tensorflow/tensorflow/pull/57248
github.com/tensorflow/tensorflow/pull/57417
github.com/tensorflow/tensorflow/security/advisories/GHSA-wxjj-cgcx-r3vq
Related
