Lucene search
Veracode Vulnerability DatabaseVERACODE:37403HistoryOct 04, 2022 - 8:03 a.m.
Denial Of Service (DoS)
2022-10-0408:03:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
denial of service
vulnerability
input validation
fakequantwithminmaxvarsperchannel
stalling
system failure
tensorflow
EPSS
0.001
Percentile
35.2%
tensorflow is vulnerable to denial of service. The vulnerability exists due to a lack of validation of the FakeQuantWithMinMaxVarsPerChannel input allowing an attacker to bring the system into a failed ‘CHECK’ resulting in the system stalling.
References
github.com/tensorflow/tensorflow/blob/4fb5006c57409a0660bc8813ce9c57b94e1aef53/tensorflow/security/advisory/tfsa-2022-106.md
github.com/tensorflow/tensorflow/commit/01c0af6cbaf038e64f1dfe89f3b36751c2f73f39
github.com/tensorflow/tensorflow/commit/4c816215f2aa2ea711a248e3bb359ab6ccbec610
github.com/tensorflow/tensorflow/commit/785d67a78a1d533759fcd2f5e8d6ef778de849e0
github.com/tensorflow/tensorflow/commit/bb453d3a047326ea7cd05c8402ee356249960f98
Related
github
github
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel`
2022-09-16 21:13:43
cve
cve
CVE-2022-36019
2022-09-16 22:15:11
cvelist
cvelist
osv
osv
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel`
2022-09-16 21:13:43
BIT-tensorflow-2022-36019
2024-03-06 11:11:50
CVE-2022-36019
2022-09-16 22:15:11
prion
prion
Stack overflow
2022-09-16 22:15:00
nvd
nvd
CVE-2022-36019
2022-09-16 22:15:11
