PT-2021-18283 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29532

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier

Description: An attacker can force accesses outside the bounds of heap allocated arrays by passing in invalid tensor values to tf.raw ops.RaggedCross. This is because the implementation lacks validation for the user supplied arguments. Each of the above branches call a helper function after accessing array elements via a * list[next *] pattern, followed by incrementing the next * index. However, as there is no validation that the next * values are in the valid range for the corresponding * list arrays, this results in heap OOB reads.

Recommendations: For TensorFlow versions prior to 2.5.0, update to version 2.5.0 or later. For TensorFlow versions 2.4.2 and earlier, update to version 2.4.2 or later. For TensorFlow versions 2.3.3 and earlier, update to version 2.3.3 or later. For TensorFlow versions 2.2.3 and earlier, update to version 2.2.3 or later. For TensorFlow versions 2.1.4 and earlier, update to version 2.1.4 or later. As a temporary workaround, consider restricting the use of tf.raw ops.RaggedCross until a patch is available.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BIT-TENSORFLOW-2021-29532

CVE-2021-29532

GHSA-J47F-4232-HVV8

PYSEC-2021-169

PYSEC-2021-460

PYSEC-2021-658

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j47f-4232-hvv8 · Exploit
• https://github.com/tensorflow/tensorflow/commit/44b7f486c0143f68b56c34e2d01e146ee445134a · Patch
• https://osv.dev/vulnerability/PYSEC-2021-460 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29532 · Security Note
• https://osv.dev/vulnerability/CVE-2021-29532 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-169 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-658 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29532 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-j47f-4232-hvv8 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-169.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-658.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-460.yaml · Note