PT-2021-18326 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29575

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier

Description The implementation of tf.raw ops.ReverseSequence allows for stack overflow and/or CHECK-fail based denial of service. The implementation fails to validate that seq dim and batch dim arguments are valid. Negative values for seq dim can result in stack overflow or CHECK-failure, depending on the version of Eigen code used to implement the operation. Similar behavior can be exhibited by invalid values of batch dim.

Recommendations For versions prior to 2.5.0, update to TensorFlow 2.5.0 or later. For versions 2.4.2 and earlier, update to TensorFlow 2.4.2 or later. For versions 2.3.3 and earlier, update to TensorFlow 2.3.3 or later. For versions 2.2.3 and earlier, update to TensorFlow 2.2.3 or later. For versions 2.1.4 and earlier, update to TensorFlow 2.1.4 or later. As a temporary workaround, consider validating the seq dim and batch dim arguments before passing them to tf.raw ops.ReverseSequence to prevent stack overflow or CHECK-failure.

Exploit

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-120

CWE-119

CWE-787

Related Identifiers

BIT-TENSORFLOW-2021-29575

CVE-2021-29575

GHSA-6QGM-FV6V-RFPV

PYSEC-2021-212

PYSEC-2021-503

PYSEC-2021-701

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6qgm-fv6v-rfpv · Exploit
• https://github.com/tensorflow/tensorflow/commit/ecf768cbe50cedc0a45ce1ee223146a3d3d26d23 · Patch
• https://osv.dev/vulnerability/PYSEC-2021-701 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29575 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-503 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29575 · Security Note
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29575 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-212 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6qgm-fv6v-rfpv · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-503.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-212.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-701.yaml · Note