PT-2021-18313 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29562

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow version 2.4.2 TensorFlow version 2.3.3 TensorFlow version 2.2.3 TensorFlow version 2.1.4

Description An attacker can cause a denial of service by exploiting a CHECK-failure coming from the implementation of tf.raw ops.IRFFT. This issue can be triggered by causing Eigen code to operate on an empty matrix, which leads to program termination. The vulnerability was reported by Yakun Zhang and Ying Wang of Baidu X-Team.

Recommendations For TensorFlow versions prior to 2.5.0, update to version 2.5.0 or later. For TensorFlow version 2.4.2, apply the patch from GitHub commit 1c56f53be0b722ca657cbc7df461ed676c8642a2 or update to a later version. For TensorFlow version 2.3.3, apply the patch from GitHub commit 1c56f53be0b722ca657cbc7df461ed676c8642a2 or update to a later version. For TensorFlow version 2.2.3, apply the patch from GitHub commit 1c56f53be0b722ca657cbc7df461ed676c8642a2 or update to a later version. For TensorFlow version 2.1.4, apply the patch from GitHub commit 1c56f53be0b722ca657cbc7df461ed676c8642a2 or update to a later version. As a temporary workaround, consider avoiding the use of tf.raw ops.IRFFT with empty matrices until a patch is applied.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

BIT-TENSORFLOW-2021-29562

CVE-2021-29562

GHSA-36VM-XW34-X4PJ

PYSEC-2021-199

PYSEC-2021-490

PYSEC-2021-688

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-36vm-xw34-x4pj · Exploit
• https://github.com/tensorflow/tensorflow/commit/1c56f53be0b722ca657cbc7df461ed676c8642a2 · Patch
• https://osv.dev/vulnerability/PYSEC-2021-199 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29562 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-688 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-490 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29562 · Security Note
• https://osv.dev/vulnerability/GHSA-36vm-xw34-x4pj · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29562 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-688.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-199.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-490.yaml · Note