PT-2021-18336 · Google · Tensorflow

Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29585

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier

Description The TFLite computation for size of output after padding, ComputeOutSize, does not check that the stride argument is not 0 before doing the division. Users can craft special models such that ComputeOutSize is called with stride set to 0.

Recommendations For versions prior to 2.5.0, update to TensorFlow 2.5.0 or later. For versions 2.4.2 and earlier, update to TensorFlow 2.4.2 or later. For versions 2.3.3 and earlier, update to TensorFlow 2.3.3 or later. For versions 2.2.3 and earlier, update to TensorFlow 2.2.3 or later. For versions 2.1.4 and earlier, update to TensorFlow 2.1.4 or later. As a temporary workaround, consider avoiding the use of the ComputeOutSize function with a stride argument set to 0 until a patch is available.

Exploit

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

BIT-TENSORFLOW-2021-29585

CVE-2021-29585

GHSA-MV78-G7WQ-MHP4

PYSEC-2021-222

PYSEC-2021-513

PYSEC-2021-711

Affected Products

Tensorflow

References · 15

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mv78-g7wq-mhp4 · Exploit
• https://github.com/tensorflow/tensorflow/commit/49847ae69a4e1a97ae7f2db5e217c77721e37948 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-29585 · Security Note
• https://osv.dev/vulnerability/GHSA-mv78-g7wq-mhp4 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-513 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-711 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-222 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29585 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29585 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/blob/0c9692ae7b1671c983569e5d3de5565843d500cf/tensorflow/lite/kernels/padding.h#L43-L55 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-513.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-711.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-222.yaml · Note
• https://t.me/cvenotify/14707 · Telegram Post