How severe is CVE-2022-29207?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.5 out of 10.

What type of vulnerability is CVE-2022-29207?

This is classified as CWE-20, which is a common weakness in software security.

CVE-2022-29207 - MEDIUM Severity | CVSS 5.5

Vulnerability Description

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, multiple TensorFlow operations misbehave in eager mode when the resource handle provided to them is invalid. In graph mode, it would have been impossible to perform these API calls, but migration to TF 2.x eager mode opened up this vulnerability. If the resource handle is empty, then a reference is bound to a null pointer inside TensorFlow codebase (various codepaths). This is undefined behavior. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

Related Vulnerabilities

CVE-2008-7316

MEDIUM

CVSS:5.5(Medium)

mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers an iovec of zero length, followed by a page fault ...

CWE-202008

CVE-2010-3049

MEDIUM

CVSS:5.5(Medium)

Cisco IOS before 12.2(33)SXI allows local users to cause a denial of service (device reboot).

CWE-202010

CVE-2010-3293

MEDIUM

CVSS:5.5(Medium)

mailscanner can allow local users to prevent virus signatures from being updated

CWE-202010

CVE-2010-3373

MEDIUM

CVSS:5.5(Medium)

paxtest handles temporary files insecurely

CWE-202010

CVE-2010-5328

MEDIUM

CVSS:5.5(Medium)

include/linux/init_task.h in the Linux kernel before 2.6.35 does not prevent signals with a process group ID of zero from reaching the swapper process, which allows local users to cause a denial of se...

CWE-202010

CVE-2011-0220

MEDIUM

CVSS:5.5(Medium)

Apple Bonjour before 2011 allows a crash via a crafted multicast DNS packet.

CWE-202011