PT-2021-18369 · Google · Tensorflow

Mihaimaruseac · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29618

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions 2.1.4 through 2.4.2 TensorFlow version 2.5.0 is not affected as it includes the fix.

Description Passing a complex argument to tf.transpose at the same time as passing conjugate=True argument results in a crash. The issue arises when using the tf.transpose function with specific arguments, such as conjugate=True and a complex value for a, for example, tf.transpose(conjugate=True, a=complex(1)).

Recommendations For TensorFlow versions 2.1.4, 2.2.3, 2.3.3, and 2.4.2, update to the respective version with the cherrypicked commit to resolve the issue. For versions prior to 2.1.4, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider avoiding the use of conjugate=True with complex arguments in the tf.transpose function until a patch is available.

Exploit

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

BIT-TENSORFLOW-2021-29618

CVE-2021-29618

GHSA-XQFJ-CR6Q-PC8W

PYSEC-2021-255

PYSEC-2021-546

PYSEC-2021-744

Affected Products

Tensorflow

References · 15

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xqfj-cr6q-pc8w · Exploit
• https://github.com/tensorflow/tensorflow/commit/1dc6a7ce6e0b3e27a7ae650bfc05b195ca793f88 · Patch
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29618 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29618 · Security Note
• https://osv.dev/vulnerability/CVE-2021-29618 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xqfj-cr6q-pc8w · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-255 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-546 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-744 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-546.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-744.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-255.yaml · Note
• ❌ https://github.com/tensorflow/issues/42105 · Note, Deleted
• ❌ https://github.com/tensorflow/issues/46973 · Note, Deleted