TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failure (assertion failure) caused by assuming `input(0)`, `input(1)`, and `input(2)` to be scalar. This issue has been patched in GitHub commit c65c67f88ad770662e8f191269a907bf2b94b1bf. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.

The version of TensorFlow installed on the remote host is prior to 2.9.3. It is, therefore, affected by multiple vulnerabilities as referenced in the release notes.

    Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of TensorFlow installed on the remote host is prior to 2.10.1. It is, therefore, affected by multiple vulnerabilities as referenced in the release notes.

    Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ae132c6c-d716-11ed-956f-7054d21a9e2a advisory.

  - TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is     vulnerable to a denial of service via CHECK-failure (assertion failure) caused by assuming `input(0)`,     `input(1)`, and `input(2)` to be scalar. This issue has been patched in GitHub commit     c65c67f88ad770662e8f191269a907bf2b94b1bf. The fix will be included in TensorFlow 2.10.0. We will also     cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also     affected and still in supported range. There are no known workarounds for this issue. (CVE-2022-35935)

  - TensorFlow is an open source platform for machine learning. When `TensorListScatter` and     `TensorListScatterV2` receive an `element_shape` of a rank greater than one, they give a `CHECK` fail that     can trigger a denial of service attack. We have patched the issue in GitHub commit     bb03fdf4aae944ab2e4b35c7daa051068a8b7f61. The fix will be included in TensorFlow 2.10.0. We will also     cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also     affected and still in supported range. There are no known workarounds for this issue. (CVE-2022-35991)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
197897	TensorFlow < 2.9.3 Multiple Vulnerabilities	Nessus	Misc.	critical
197513	TensorFlow < 2.10.1 Multiple Vulnerabilities	Nessus	Misc.	critical
174320	FreeBSD : py-tensorflow -- denial of service vulnerability (ae132c6c-d716-11ed-956f-7054d21a9e2a)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2022-35935

high

Tenable Plugins

critical

critical

high