PT-2022-5383 · Google · Tensorflow

Published 2022-06-14 · Updated 2022-06-14

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:L/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions TensorFlow (affected versions not specified)

Description The issue is related to the IncrementOffset() function in the TensorFlow machine learning system, which is vulnerable due to a buffer boundary violation when processing the size of chunk value. This could allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-124

Related Identifiers

BDU:2022-06697

Affected Products

Tensorflow

References · 3

• https://bdu.fstec.ru/vul/2022-06697 · Security Note
• https://github.com/tensorflow/tensorflow/pull/56455/files/55454c3ce80a5016271b3204d34796c2f632038e · Note
• https://github.com/tensorflow/tensorflow/pull/56455 · Note