PT-2021-18327 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29576

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow version 2.4.2 and earlier TensorFlow version 2.3.3 and earlier TensorFlow version 2.2.3 and earlier TensorFlow version 2.1.4 and earlier

Description The implementation of tf.raw ops.MaxPool3DGradGrad is vulnerable to a heap buffer overflow. The issue arises because the initialization of Pool3dParameters does not check for successful completion, and the use of OP REQUIRES in the constructor can lead to interrupted initialization with invalid data, potentially causing a heap buffer overflow.

Recommendations For versions prior to 2.5.0, update to TensorFlow 2.5.0 or later. For version 2.4.2 and earlier, update to TensorFlow 2.4.2 or later. For version 2.3.3 and earlier, update to TensorFlow 2.3.3 or later. For version 2.2.3 and earlier, update to TensorFlow 2.2.3 or later. For version 2.1.4 and earlier, update to TensorFlow 2.1.4 or later.

Exploit

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

BIT-TENSORFLOW-2021-29576

CVE-2021-29576

GHSA-7CQX-92HP-X6WH

PYSEC-2021-213

PYSEC-2021-504

PYSEC-2021-702

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7cqx-92hp-x6wh · Exploit
• https://github.com/tensorflow/tensorflow/commit/63c6a29d0f2d692b247f7bf81f8732d6442fad09 · Patch
• https://osv.dev/vulnerability/GHSA-7cqx-92hp-x6wh · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-504 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29576 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-213 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-702 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29576 · Security Note
• https://osv.dev/vulnerability/CVE-2021-29576 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-504.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-702.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-213.yaml · Note