PT-2021-18342 · Google · Tensorflow

Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29591

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier

Description TensorFlow is an end-to-end open source platform for machine learning. TFlite graphs must not have loops between nodes. However, this condition was not checked and an attacker could craft models that would result in infinite loop during evaluation. In certain cases, the infinite loop would be replaced by stack overflow due to too many recursive calls. For example, the While implementation could be tricked into a scenario where both the body and the loop subgraphs are the same. Evaluating one of the subgraphs means calling the Eval function for the other and this quickly exhaust all stack space.

Recommendations For versions prior to 2.5.0, update to TensorFlow 2.5.0 or later. For versions 2.4.2 and earlier, update to TensorFlow 2.4.2 or later. For versions 2.3.3 and earlier, update to TensorFlow 2.3.3 or later. For versions 2.2.3 and earlier, update to TensorFlow 2.2.3 or later. For versions 2.1.4 and earlier, update to TensorFlow 2.1.4 or later. As a temporary workaround, consider disabling the While implementation until a patch is available.

Exploit

Fix

Uncontrolled Recursion

Infinite Loop

Weakness Enumeration

CWE-674

CWE-835

Related Identifiers

BIT-TENSORFLOW-2021-29591

CVE-2021-29591

GHSA-CWV3-863G-39VX

PYSEC-2021-228

PYSEC-2021-519

PYSEC-2021-717

Affected Products

Tensorflow

References · 16

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cwv3-863g-39vx · Exploit
• https://github.com/tensorflow/tensorflow/commit/c6173f5fe66cdbab74f4f869311fe6aae2ba35f4 · Patch
• https://github.com/tensorflow/tensorflow/commit/9c1dc920d8ffb4893d6c9d27d1f039607b326743 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-29591 · Security Note
• https://osv.dev/vulnerability/GHSA-cwv3-863g-39vx · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-519 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29591 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-228 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29591 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-717 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/blob/106d8f4fb89335a2c52d7c895b7a7485465ca8d9/tensorflow/lite/kernels/while.cc · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-519.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-717.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-228.yaml · Note