CVE-2022-36003: `CHECK` fail in `RandomPoissonV2` in TensorFlow
First published: Fri Sep 16 2022(Updated: )
TensorFlow is an open source platform for machine learning. When `RandomPoissonV2` receives large input shape and rates, it gives a `CHECK` fail that can trigger a denial of service attack. We have patched the issue in GitHub commit 552bfced6ce4809db5f3ca305f60ff80dd40c5a3. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| TensorFlow Keras | <2.7.2 | |
| TensorFlow Keras | >=2.8.0<2.8.1 | |
| TensorFlow Keras | >=2.9.0<2.9.1 | |
| TensorFlow Keras | =2.10-rc0 | |
| TensorFlow Keras | =2.10-rc1 | |
| TensorFlow Keras | =2.10-rc2 | |
| TensorFlow Keras | =2.10-rc3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-36003?
CVE-2022-36003 is classified as a denial of service vulnerability.
How do I fix CVE-2022-36003?
To fix CVE-2022-36003, upgrade TensorFlow to a patched version available after commit 552bfced6ce4809db5f3ca305f60ff80dd40c5a3.
What versions of TensorFlow are affected by CVE-2022-36003?
CVE-2022-36003 affects TensorFlow versions up to 2.7.2 and specific versions from 2.8.0 to 2.8.1, 2.9.0 to 2.9.1, and various 2.10 release candidates.
What is the impact of CVE-2022-36003 on TensorFlow users?
The impact of CVE-2022-36003 is that it can lead to denial of service attacks if large inputs are processed.
Is there a workaround for CVE-2022-36003?
There is no official workaround for CVE-2022-36003; upgrading to a fixed version is recommended.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/last-modified-date
- agent/severity
- agent/author
- agent/remedy
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/google
- canonical/tensorflow keras
- version/tensorflow keras/2.8.0
- version/tensorflow keras/2.9.0
- version/tensorflow keras/2.10-rc0
- version/tensorflow keras/2.10-rc1
- version/tensorflow keras/2.10-rc2
- version/tensorflow keras/2.10-rc3