Denial Of Service (DoS)

2022-10-0406:02:17

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

tensorflow vulnerability denial service quantizedinstancenorm crash segmentation fault

0.001 Low

EPSS

Percentile

32.5%

JSON

tensorflow is vulnerable to denial of service. The vulnerability exists because the library does not properly validate the quantize ops inputs, allowing an attacker to crash the application through the segmentation fault by passing a nonzero rank when QuantizedInstanceNorm is given x_min or x_max tensors.

CPENameOperatorVersion
tensorflowle2.9.1
tensorflowle2.8.2
tensorflowle2.7.3
tensorflow-cpule2.9.1
tensorflow-cpule2.8.2
tensorflow-cpule2.7.3
tensorflow-gpule2.9.1
tensorflow-gpule2.8.2
tensorflow-gpule2.7.3
tensorflowle2.9.1

Name	Operator	Version
tensorflow	le	2.9.1
tensorflow	le	2.8.2
tensorflow	le	2.7.3
tensorflow-cpu	le	2.9.1
tensorflow-cpu	le	2.8.2
tensorflow-cpu	le	2.7.3
tensorflow-gpu	le	2.9.1
tensorflow-gpu	le	2.8.2
tensorflow-gpu	le	2.7.3
tensorflow	le	2.9.1