PT-2021-18293 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29542

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier

Description An attacker can cause a heap buffer overflow by passing crafted inputs to tf.raw ops.StringNGrams. This is because the implementation fails to consider corner cases where input would be split in such a way that the generated tokens should only contain padding elements. If input is such that num tokens is 0, then, for data start index=0 (when left padding is present), the marked line would result in reading data[-1].

Recommendations For versions prior to 2.5.0, update to TensorFlow 2.5.0 or later. For versions 2.4.2 and earlier, update to TensorFlow 2.4.2 or later. For versions 2.3.3 and earlier, update to TensorFlow 2.3.3 or later. For versions 2.2.3 and earlier, update to TensorFlow 2.2.3 or later. For versions 2.1.4 and earlier, update to TensorFlow 2.1.4 or later. As a temporary workaround, consider avoiding the use of tf.raw ops.StringNGrams until a patch is available.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

CWE-131

Related Identifiers

BIT-TENSORFLOW-2021-29542

CVE-2021-29542

GHSA-4HRH-9VMP-2JGG

PYSEC-2021-179

PYSEC-2021-470

PYSEC-2021-668

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4hrh-9vmp-2jgg · Exploit
• https://github.com/tensorflow/tensorflow/commit/ba424dd8f16f7110eea526a8086f1a155f14f22b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-29542 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-668 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-179 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-470 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29542 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29542 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4hrh-9vmp-2jgg · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-470.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-668.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-179.yaml · Note