CVE-2022-29204: Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of tf.rawops.UnsortedSegmentJoin does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack. The code assumes numsegments is a positive scalar but there is no validation. Since this value is used to allocate the output tensor, a negative value would result in a CHECK-failure (assertion failure), as per TFSA-2021-198. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-29204?
The severity of CVE-2022-29204 is considered to be medium due to its potential for causing denial of service through input validation failures.
How do I fix CVE-2022-29204?
To fix CVE-2022-29204, update TensorFlow to versions 2.9.0, 2.8.1, 2.7.2, or 2.6.4 or later.
What versions of TensorFlow are affected by CVE-2022-29204?
CVE-2022-29204 affects TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4.
What does CVE-2022-29204 impact in TensorFlow?
CVE-2022-29204 impacts the `tf.raw_ops.UnsortedSegmentJoin` operation by failing to fully validate input arguments.
Can CVE-2022-29204 be exploited remotely?
Yes, CVE-2022-29204 can be exploited remotely, leading to potential denial of service on affected systems.