PT-2021-18363 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29612

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow version 2.4.2 TensorFlow version 2.3.3 TensorFlow version 2.2.3 TensorFlow version 2.1.4

Description An attacker can trigger a heap buffer overflow in the Eigen implementation of tf.raw ops.BandedTriangularSolve. The implementation calls ValidateInputTensors for input validation but fails to validate that the two tensors are not empty. Furthermore, since the OP REQUIRES macro only stops execution of the current function after setting ctx->status() to a non-OK value, callers of helper functions that use OP REQUIRES must check the value of ctx->status() before continuing. This does not happen in the op's implementation, hence the validation that is present is also not effective.

Recommendations For versions prior to 2.5.0, update to TensorFlow 2.5.0 or later. For version 2.4.2, update to a patched version or apply the fix from GitHub commit ba6822bd7b7324ba201a28b2f278c29a98edbef2. For version 2.3.3, update to a patched version or apply the fix from GitHub commit ba6822bd7b7324ba201a28b2f278c29a98edbef2. For version 2.2.3, update to a patched version or apply the fix from GitHub commit ba6822bd7b7324ba201a28b2f278c29a98edbef2. For version 2.1.4, update to a patched version or apply the fix from GitHub commit ba6822bd7b7324ba201a28b2f278c29a98edbef2. As a temporary workaround, consider disabling the tf.raw ops.BandedTriangularSolve operation until a patch is available.

Exploit

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-120

CWE-787

Related Identifiers

BIT-TENSORFLOW-2021-29612

CVE-2021-29612

GHSA-2XGJ-XHGF-GGJV

PYSEC-2021-249

PYSEC-2021-540

PYSEC-2021-738

Affected Products

Tensorflow

References · 14

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2xgj-xhgf-ggjv · Exploit
• https://github.com/tensorflow/tensorflow/commit/0ab290774f91a23bebe30a358fde4e53ab4876a0 · Patch
• https://github.com/tensorflow/tensorflow/commit/ba6822bd7b7324ba201a28b2f278c29a98edbef2 · Patch
• https://osv.dev/vulnerability/PYSEC-2021-738 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29612 · Security Note
• https://osv.dev/vulnerability/CVE-2021-29612 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2xgj-xhgf-ggjv · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-249 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29612 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-540 · Vendor Advisory
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-738.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-249.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-540.yaml · Note
• https://t.me/cvenotify/14602 · Telegram Post