PT-2021-18330 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29579

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier

Description The implementation of tf.raw ops.MaxPoolGrad is vulnerable to a heap buffer overflow. The issue arises from the failure to validate indices used to access elements of input/output arrays, specifically in the indexing of out backprop flat, which can result in out-of-bounds access.

Recommendations For versions prior to 2.5.0, update to TensorFlow 2.5.0 or later. For versions 2.4.2 and earlier, update to TensorFlow 2.4.2 or later. For versions 2.3.3 and earlier, update to TensorFlow 2.3.3 or later. For versions 2.2.3 and earlier, update to TensorFlow 2.2.3 or later. For versions 2.1.4 and earlier, update to TensorFlow 2.1.4 or later. As a temporary workaround, consider disabling the tf.raw ops.MaxPoolGrad operation until a patch is available.

Exploit

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

BIT-TENSORFLOW-2021-29579

CVE-2021-29579

GHSA-79FV-9865-4QCV

PYSEC-2021-216

PYSEC-2021-507

PYSEC-2021-705

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-79fv-9865-4qcv · Exploit
• https://github.com/tensorflow/tensorflow/commit/a74768f8e4efbda4def9f16ee7e13cf3922ac5f7 · Patch
• https://osv.dev/vulnerability/GHSA-79fv-9865-4qcv · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29579 · Security Note
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29579 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29579 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-216 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-507 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-705 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-705.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-216.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-507.yaml · Note