MediumVulnerability
CVE-2022-36018: TensorFlow denial of service through RaggedTensorToVariant with malformed splits
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2022-36018
- Published
- Record updated
- Affected
- tensorflow < 2.7.2, fixed in 2.7.2
- tensorflow >= 2.8.0, < 2.8.1, fixed in 2.8.1
- tensorflow >= 2.9.0, < 2.9.1, fixed in 2.9.1
- and 6 more
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.5%
Summary
TensorFlow's `RaggedTensorToVariant` crashes on a `CHECK` failure when `rt_nested_splits` contains tensors whose ranks are not one. The flaw can be triggered to cause a denial of service. The affected release line is identified in the source by its version numbers.
Mitigation
Patched in GitHub commit 88f93dfe691563baa4ae1e80ccde2d5c7a143821. The fix will be included in TensorFlow 2.10.0 and cherry-picked to TensorFlow 2.9.1, 2.8.1 and 2.7.2.
Related items
- HighHermes Agent - Pre-Authentication Disk ConsumptionSimilar attack · Tenable Research Advisories
- MediumHermes Agent - Pre-Authentication Memory ExhaustionSimilar attack · Tenable Research Advisories
- MediumGHSA-v36g-jcw9-x7cw: Pydantic AI: Excessive resource use when local web fetching converts nested HTMLSimilar attack · GitHub Advisory Database
- MediumGHSA-v2xh-2vp8-57h8: Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrlSimilar attack · GitHub Advisory Database
- MediumGHSA-fpf4-vwcp-v4hp: Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`Similar attack · GitHub Advisory Database