Количество 3
Количество 3
CVE-2022-29195
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.StagePeek` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. The code assumes `index` is a scalar but there is no validation for this before accessing its value. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVE-2022-29195
TensorFlow is an open source platform for machine learning. Prior to v ...
GHSA-h48f-q7rw-hvr7
Missing validation causes denial of service via `StagePeek`
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-29195 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.StagePeek` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. The code assumes `index` is a scalar but there is no validation for this before accessing its value. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue. | CVSS3: 5.5 | 0% Низкий | больше 3 лет назад |
| CVE-2022-29195 TensorFlow is an open source platform for machine learning. Prior to v ... | CVSS3: 5.5 | 0% Низкий | больше 3 лет назад |
| GHSA-h48f-q7rw-hvr7 Missing validation causes denial of service via `StagePeek` | CVSS3: 5.5 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу