PT-2021-18329 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29578

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier

Description The implementation of tf.raw ops.FractionalAvgPoolGrad is vulnerable to a heap buffer overflow. The issue arises from the failure to validate that the pooling sequence arguments have enough elements as required by the out backprop tensor shape.

Recommendations For versions prior to 2.5.0, update to TensorFlow 2.5.0 or later. For versions 2.4.2 and earlier, update to TensorFlow 2.4.2 or later. For versions 2.3.3 and earlier, update to TensorFlow 2.3.3 or later. For versions 2.2.3 and earlier, update to TensorFlow 2.2.3 or later. For versions 2.1.4 and earlier, update to TensorFlow 2.1.4 or later. As a temporary workaround, consider disabling the tf.raw ops.FractionalAvgPoolGrad function until a patch is available.

Exploit

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

BIT-TENSORFLOW-2021-29578

CVE-2021-29578

GHSA-6F89-8J54-29XF

PYSEC-2021-215

PYSEC-2021-506

PYSEC-2021-704

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6f89-8j54-29xf · Exploit
• https://github.com/tensorflow/tensorflow/commit/12c727cee857fa19be717f336943d95fca4ffe4f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-29578 · Security Note
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29578 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-704 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29578 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-215 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-506 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6f89-8j54-29xf · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-704.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-215.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-506.yaml · Note