Veracode Vulnerability DatabaseVERACODE:37213Denial Of Service (DoS)
EPSS
Percentile
35.2%
tensorflow is vulnerable to denial of service. The vulnerability exists in the multiple functions in conv_grad_input_ops.cc due to check fail in Conv2DBackpropInput which allows an attacker to cause an application crash by providing malicious input.
References
github.com/advisories/GHSA-q2c3-jpmc-gfjx
github.com/tensorflow/tensorflow/commit/50156d547b9a1da0144d7babe665cf690305b33c
github.com/tensorflow/tensorflow/commit/a6270c97bc96a080e678bbcdf60cefb08213f18a
github.com/tensorflow/tensorflow/commit/bec93427d9e557617d48e32924c139c93b8ac11e
github.com/tensorflow/tensorflow/commit/c88ec12530340d99d3176860e09ca3061f85ad88
github.com/tensorflow/tensorflow/pull/57262
github.com/tensorflow/tensorflow/pull/57263
github.com/tensorflow/tensorflow/pull/57264
github.com/tensorflow/tensorflow/security/advisories/GHSA-q2c3-jpmc-gfjx
Related
