CVE-2022-36003: `CHECK` fail in `RandomPoissonV2` in TensorFlow
TensorFlow is an open source platform for machine learning. When RandomPoissonV2 receives large input shape and rates, it gives a CHECK fail that can trigger a denial of service attack. We have patched the issue in GitHub commit 552bfced6ce4809db5f3ca305f60ff80dd40c5a3. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-36003?
CVE-2022-36003 is classified as a denial of service vulnerability.
How do I fix CVE-2022-36003?
To fix CVE-2022-36003, upgrade TensorFlow to a patched version available after commit 552bfced6ce4809db5f3ca305f60ff80dd40c5a3.
What versions of TensorFlow are affected by CVE-2022-36003?
CVE-2022-36003 affects TensorFlow versions up to 2.7.2 and specific versions from 2.8.0 to 2.8.1, 2.9.0 to 2.9.1, and various 2.10 release candidates.
What is the impact of CVE-2022-36003 on TensorFlow users?
The impact of CVE-2022-36003 is that it can lead to denial of service attacks if large inputs are processed.
Is there a workaround for CVE-2022-36003?
There is no official workaround for CVE-2022-36003; upgrading to a fixed version is recommended.