tensorflow is vulnerable to denial of service (DoS) attacks. An attacker is able to cause denial of service conditions due to improper validation of user Inputs, dense_features
and example_state_data
, resulting in a CHECK
fail in SdcaOptimizer
.
github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/sdca_internal.cc
github.com/tensorflow/tensorflow/commit/0c8d0b9783f7863166bafe02b230dd49bdb626fa
github.com/tensorflow/tensorflow/commit/1377b37f0cdfa2dc411d6e7e29a25b0b2e257cfb
github.com/tensorflow/tensorflow/commit/216f90057f230109b9f637d99e8996ef5827fed0
github.com/tensorflow/tensorflow/commit/80ff197d03db2a70c6a111f97dcdacad1b0babfa
github.com/tensorflow/tensorflow/pull/58233
github.com/tensorflow/tensorflow/pull/58235
github.com/tensorflow/tensorflow/pull/58236
github.com/tensorflow/tensorflow/security/advisories/GHSA-27rc-728f-x5w2