PT-2021-18364 · Google · Tensorflow

Yakun Zhang + 1 · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29613

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier

Description Incomplete validation in tf.raw ops.CTCLoss allows an attacker to trigger an out-of-bounds read from the heap, a heap buffer overflow, or a null pointer dereference. This issue affects TensorFlow and can be exploited by providing specially crafted input to the tf.raw ops.CTCLoss function.

Recommendations For versions prior to 2.5.0, update to TensorFlow 2.5.0 or later. For versions 2.4.2 and earlier, update to TensorFlow 2.4.2 or later. For versions 2.3.3 and earlier, update to TensorFlow 2.3.3 or later. For versions 2.2.3 and earlier, update to TensorFlow 2.2.3 or later. For versions 2.1.4 and earlier, update to TensorFlow 2.1.4 or later. As a temporary workaround, consider disabling the tf.raw ops.CTCLoss function until a patch is available. Restrict access to the tf.raw ops.CTCLoss function to minimize the risk of exploitation. Avoid using the inputs, labels indices, labels values, and sequence length parameters in the affected API endpoint until the issue is resolved.

Exploit

Fix

Out of bounds Read

Improper Initialization

Weakness Enumeration

CWE-125

CWE-665

Related Identifiers

BIT-TENSORFLOW-2021-29613

CVE-2021-29613

GHSA-VVG4-VGRV-XFR7

PYSEC-2021-250

PYSEC-2021-541

PYSEC-2021-739

Affected Products

Tensorflow

References · 15

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vvg4-vgrv-xfr7 · Exploit
• https://github.com/tensorflow/tensorflow/commit/14607c0707040d775e06b6817325640cb4b5864c · Patch
• https://github.com/tensorflow/tensorflow/commit/4504a081af71514bb1828048363e6540f797005b · Patch
• https://osv.dev/vulnerability/CVE-2021-29613 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-541 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29613 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-739 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vvg4-vgrv-xfr7 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29613 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-250 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-250.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-541.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-739.yaml · Note
• https://t.me/cvenotify/14601 · Telegram Post