CVE-2022-23579: Denial of Service Vulnerability in TensorFlow
Summary
CVE-2022-23579: Tensorflow is an Open Source Machine Learning Framework. Affects tensorflow-gpu across 3 version ranges.
< 2.5.3
>= 2.6.0, < 2.6.3
< 92dba16749fae36c246bec3f9ba474d9ddeb7662
Fixed in 2.5.3 or 2.6.3, depending on the release line you run. How to fix ↓
Also tracked for
- tensorflow · PyPI
- tensorflow · Bitnami
- tensorflow · PyPI
- tensorflow-cpu · PyPI
The same CVE-2022-23579 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TensorFlow is an open-source machine learning framework widely used for developing and deploying machine learning models. It provides a comprehensive ecosystem of tools, libraries, and resources for building and training various types of neural networks. TensorFlow is known for its scalability, flexibility, and extensive support for deep learning algorithms. However, a vulnerability has been discovered in TensorFlow that can lead to a denial of service (DoS) attack.
Vulnerability Detail
The vulnerability resides in the Grappler optimizer component of TensorFlow. By manipulating a SavedModel, an attacker can trigger CHECK failures in the SafeToRemoveIdentity function, causing the system to crash and become unresponsive. This vulnerability can be exploited remotely, potentially leading to a complete disruption of service. The issue has been assigned CVE-2022-23579 and has been acknowledged by the TensorFlow team. The fix for this vulnerability will be included in TensorFlow 2.8.0, and patches will also be provided for TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3.
How To Fix
Latest published version: 2.12.0 as of 22 Oct 2026
pip install --upgrade "tensorflow-gpu==2.12.0"Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.
If you can't move to the latest
The minimum fixed version depends on the release line you run.
-
< 2.5.32.5.3pip install --upgrade "tensorflow-gpu==2.5.3" -
>= 2.6.0, < 2.6.32.6.3pip install --upgrade "tensorflow-gpu==2.6.3"
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided patches or update to the fixed versions of TensorFlow as soon as possible to mitigate the risk of a DoS attack.
Conclusion
The vulnerability in TensorFlow can lead to a denial of service attack by exploiting the Grappler optimizer. It is recommended to update to TensorFlow 2.8.0 or apply the provided patches for the affected versions to mitigate the risk. Keeping TensorFlow up to date is essential for maintaining the security and stability of machine learning applications. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for tensorflow-gpu →
FAQ
TensorFlow is an open-source machine learning framework used for developing and deploying machine learning models.
This vulnerability can be exploited remotely to cause a denial of service, potentially leading to a complete disruption of service.
The vulnerability affects TensorFlow versions 2.5.3, 2.6.3, and 2.7.1. These versions are still within the supported range.
To fix this vulnerability, update TensorFlow to version 2.8.0 or apply the provided patches for the affected versions.
No, there is no known workaround for this vulnerability. It is crucial to update TensorFlow to the fixed versions or apply the patches.
References
Related vulnerabilities
Recent vulnerabilities recorded for tensorflow-gpu.
