PT-2021-18294 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29543

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow version 2.4.2 TensorFlow version 2.3.3 TensorFlow version 2.2.3 TensorFlow version 2.1.4

Description An attacker can trigger a denial of service via a CHECK-fail in tf.raw ops.CTCGreedyDecoder. This is because the implementation has a CHECK LT inserted to validate some invariants. When this condition is false, the program aborts, instead of returning a valid error to the user. This abnormal termination can be weaponized in denial of service attacks.

Recommendations For TensorFlow versions prior to 2.5.0, update to version 2.5.0 or later. For TensorFlow version 2.4.2, apply the patch from GitHub commit ea3b43e98c32c97b35d52b4c66f9107452ca8fb2. For TensorFlow version 2.3.3, apply the patch from GitHub commit ea3b43e98c32c97b35d52b4c66f9107452ca8fb2. For TensorFlow version 2.2.3, apply the patch from GitHub commit ea3b43e98c32c97b35d52b4c66f9107452ca8fb2. For TensorFlow version 2.1.4, apply the patch from GitHub commit ea3b43e98c32c97b35d52b4c66f9107452ca8fb2. As a temporary workaround, consider avoiding the use of tf.raw ops.CTCGreedyDecoder until a patch is applied.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

BIT-TENSORFLOW-2021-29543

CVE-2021-29543

GHSA-FPHQ-GW9M-GHRV

PYSEC-2021-180

PYSEC-2021-471

PYSEC-2021-669

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fphq-gw9m-ghrv · Exploit
• https://github.com/tensorflow/tensorflow/commit/ea3b43e98c32c97b35d52b4c66f9107452ca8fb2 · Patch
• https://osv.dev/vulnerability/PYSEC-2021-471 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-fphq-gw9m-ghrv · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29543 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-180 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-669 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29543 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29543 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-471.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-669.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-180.yaml · Note