PT-2019-11098 · Google · Tensorflow

Published 2019-04-24 · Updated 2019-04-30 · CVE-2018-7575

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Google TensorFlow versions 1.7.x and earlier

Description: The issue is related to a Buffer Overflow, where the type of exploitation is context-dependent. Specifically, the block size in a meta file might contain a large int64 value, causing an integer overflow upon addition. This can lead to subsequent code using the value as an index, resulting in an out-of-bounds read. A maliciously crafted meta checkpoint could be used to cause the TensorFlow process to perform an out-of-bounds read on in-process memory.

Recommendations: For Google TensorFlow versions 1.7.x and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2018-7575

GHSA-MW6V-CRH8-8533

PYSEC-2019-205

PYSEC-2019-223

PYSEC-2019-230

Affected Products

Tensorflow

References · 13

• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-004.md · Patch
• https://osv.dev/vulnerability/GHSA-mw6v-crh8-8533 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2019-223 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7575 · Security Note
• https://osv.dev/vulnerability/PYSEC-2019-205 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-7575 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2019-230 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/commit/d107fee1e4a9a4462f01564798d345802acc2aef · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2019-205.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2019-223.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2019-230.yaml · Note
• https://github.com/advisories/GHSA-mw6v-crh8-8533 · Note