title: CHECK-fail in LSTM with zero-length input in TensorFlow
description: In affected versions of TensorFlow running an LSTM/GRU model where the LSTM/GRU layer receives an input with zero-length results in a CHECK failure when using the CUDA backend. This can result in a query-of-death vulnerability, via denial of service, if users can control the input to the layer. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.
problem types: CWE-20 Improper Input Validation
affected:
{
product: tensorflow
vendor: tensorflow
versions:
status: affected, version: < 1.15.5
status: affected, version: >= 2.0.0, < 2.0.4
status: affected, version: >= 2.1.0, < 2.1.3
status: affected, version: >= 2.2.0, < 2.2.2
status: affected, version: >= 2.3.0, < 2.3.2
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
version: 3.1
]