PT-2021-18321 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29570

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier

Description The implementation of tf.raw ops.MaxPoolGradWithArgmax can cause reads outside of bounds of heap allocated data if an attacker supplies specially crafted inputs. This occurs because the implementation uses the same value to index in two different arrays without guaranteeing that the sizes are identical.

Recommendations For versions prior to 2.5.0, update to TensorFlow 2.5.0 or later. For versions 2.4.2 and earlier, update to TensorFlow 2.4.2 or later. For versions 2.3.3 and earlier, update to TensorFlow 2.3.3 or later. For versions 2.2.3 and earlier, update to TensorFlow 2.2.3 or later. For versions 2.1.4 and earlier, update to TensorFlow 2.1.4 or later. As a temporary workaround, consider avoiding the use of tf.raw ops.MaxPoolGradWithArgmax until a patch is applied.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BIT-TENSORFLOW-2021-29570

CVE-2021-29570

GHSA-545V-42P7-98FQ

PYSEC-2021-207

PYSEC-2021-498

PYSEC-2021-696

Affected Products

Tensorflow

References · 13

• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-545v-42p7-98fq · Patch
• https://github.com/tensorflow/tensorflow/commit/dcd7867de0fea4b72a2b34bd41eb74548dc23886 · Patch
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29570 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29570 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-545v-42p7-98fq · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-498 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29570 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-207 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-696 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-696.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-498.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-207.yaml · Note