PT-2021-18271 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29520

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow version 2.4.2 TensorFlow version 2.3.3 TensorFlow version 2.2.3 TensorFlow version 2.1.4

Description: Missing validation between arguments to tf.raw ops.Conv3DBackprop* operations can result in heap buffer overflows. This occurs because the implementation assumes that the input, filter sizes, and out backprop tensors have the same shape, as they are accessed in parallel.

Recommendations: For TensorFlow versions prior to 2.5.0, update to version 2.5.0 or later. For TensorFlow version 2.4.2, apply the patch from GitHub commit 8f37b52e1320d8d72a9529b2468277791a261197. For TensorFlow version 2.3.3, apply the patch from GitHub commit 8f37b52e1320d8d72a9529b2468277791a261197. For TensorFlow version 2.2.3, apply the patch from GitHub commit 8f37b52e1320d8d72a9529b2468277791a261197. For TensorFlow version 2.1.4, apply the patch from GitHub commit 8f37b52e1320d8d72a9529b2468277791a261197. As a temporary workaround, consider disabling the tf.raw ops.Conv3DBackprop* operations until a patch is available.

Exploit

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-120

CWE-787

Related Identifiers

BIT-TENSORFLOW-2021-29520

CVE-2021-29520

GHSA-WCV5-QRJ6-9PFM

PYSEC-2021-157

PYSEC-2021-448

PYSEC-2021-646

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wcv5-qrj6-9pfm · Exploit
• https://github.com/tensorflow/tensorflow/commit/8f37b52e1320d8d72a9529b2468277791a261197 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-29520 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-157 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-646 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-448 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wcv5-qrj6-9pfm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29520 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29520 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-157.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-448.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-646.yaml · Note