PT-2021-18361 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29610

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier

Description The validation in tf.raw ops.QuantizeAndDequantizeV2 allows invalid values for the axis argument. The validation uses || to mix two different conditions. If axis < -1, the condition in OP REQUIRES will still be true, but this value of axis results in heap underflow. This allows attackers to read/write to other data on the heap.

Recommendations For TensorFlow versions prior to 2.5.0, update to TensorFlow 2.5.0 or later. For TensorFlow versions 2.4.2 and earlier, update to TensorFlow 2.4.2 or later. For TensorFlow versions 2.3.3 and earlier, update to TensorFlow 2.3.3 or later. For TensorFlow versions 2.2.3 and earlier, update to TensorFlow 2.2.3 or later. For TensorFlow versions 2.1.4 and earlier, update to TensorFlow 2.1.4 or later. As a temporary workaround, consider restricting the use of the tf.raw ops.QuantizeAndDequantizeV2 function until a patch is available. Avoid using the axis argument with values less than -1 in the affected API endpoint until the issue is resolved.

Exploit

Fix

Memory Corruption

Improper Initialization

Weakness Enumeration

CWE-787

CWE-665

Related Identifiers

BIT-TENSORFLOW-2021-29610

CVE-2021-29610

GHSA-MQ5C-PRH3-3F3H

PYSEC-2021-247

PYSEC-2021-538

PYSEC-2021-736

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mq5c-prh3-3f3h · Exploit
• https://github.com/tensorflow/tensorflow/commit/c5b0d5f8ac19888e46ca14b0e27562e7fbbee9a9 · Patch
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29610 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29610 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mq5c-prh3-3f3h · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-736 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-538 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-247 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29610 · Security Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-736.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-538.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-247.yaml · Note