PT-2023-20224 · Google · Tensorflow

Yu Tian · Publicado 2023-03-24 · Atualizado 2024-03-06 · CVE-2023-25663

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.12.0 and 2.11.1

Description The issue occurs when ctx->step containter() is a null pointer, causing the Lookup function to be executed with a null pointer. This can be triggered in certain scenarios, such as when using the tf.raw ops.TensorArrayConcatV2 function with specific parameters, including handle, flow in, dtype, and element shape except0. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For versions prior to 2.12.0, update to version 2.12.0 to resolve the issue. For versions prior to 2.11.1, update to version 2.11.1 to resolve the issue. As a temporary workaround, consider avoiding the use of the tf.raw ops.TensorArrayConcatV2 function with a null ctx->step containter() until a patch is applied.

Exploit

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

AZL-31215

AZL-35308

BIT-TENSORFLOW-2023-25663

CVE-2023-25663

GHSA-64JG-WJWW-7C5W

Produtos afetados

Tensorflow

Referências · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25663.json · Exploit
• https://github.com/tensorflow/tensorflow · Nota
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-64jg-wjww-7c5w · Aviso do Fabricante
• https://github.com/tensorflow/tensorflow/commit/239139d2ae6a81ae9ba499ad78b56d9b2931538a · Correção
• https://osv.dev/vulnerability/AZL-31215 · Aviso do Fabricante
• https://osv.dev/vulnerability/AZL-35308 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-25663 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-25663 · Nota de Segurança
• https://t.me/cibsecurity/60730 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-64jg-wjww-7c5w · Aviso do Fabricante
• https://osv.dev/vulnerability/BIT-tensorflow-2023-25663 · Aviso do Fabricante