PT-2021-18318 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29567

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier

Description The issue is due to a lack of validation in tf.raw ops.SparseDenseCwiseMul, allowing an attacker to trigger denial of service via CHECK-fails or accesses to outside the bounds of heap allocated data. This can be achieved by abusing the lack of constraints between dimensions in the input arguments, which can trigger internal CHECK assertions or write to memory outside of bounds of heap allocated tensor buffers.

Recommendations For versions prior to 2.5.0, update to TensorFlow 2.5.0 or later. For versions 2.4.2 and earlier, update to TensorFlow 2.4.2 or later. For versions 2.3.3 and earlier, update to TensorFlow 2.3.3 or later. For versions 2.2.3 and earlier, update to TensorFlow 2.2.3 or later. For versions 2.1.4 and earlier, update to TensorFlow 2.1.4 or later. As a temporary workaround, consider restricting the use of tf.raw ops.SparseDenseCwiseMul until a patch is available.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

BIT-TENSORFLOW-2021-29567

CVE-2021-29567

GHSA-WP3C-XW9G-GPCG

PYSEC-2021-204

PYSEC-2021-495

PYSEC-2021-693

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wp3c-xw9g-gpcg · Exploit
• https://github.com/tensorflow/tensorflow/commit/7ae2af34087fb4b5c8915279efd03da3b81028bc · Patch
• https://osv.dev/vulnerability/GHSA-wp3c-xw9g-gpcg · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29567 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-204 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29567 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29567 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-693 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-495 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-204.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-693.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-495.yaml · Note