CVE-2022-29197: Missing validation causes denial of service in TensorFlow via `UnsortedSegmentJoin`
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of tf.rawops.UnsortedSegmentJoin does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack. The code assumes numsegments is a scalar but there is no validation for this before accessing its value. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-29197?
CVE-2022-29197 has a high severity rating due to the potential for denial of service attacks.
How do I fix CVE-2022-29197?
To fix CVE-2022-29197, upgrade TensorFlow to versions 2.9.0, 2.8.1, 2.7.2, or 2.6.4 or later.
What versions are affected by CVE-2022-29197?
CVE-2022-29197 affects all TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4.
What component is vulnerable in CVE-2022-29197?
The vulnerability in CVE-2022-29197 exists in the `tf.raw_ops.UnsortedSegmentJoin` implementation.
What kind of attack vector is associated with CVE-2022-29197?
CVE-2022-29197 can be exploited to trigger a denial of service through a CHECK-failure.