PT-2021-21759 · Google · Tensorflow

Published 2021-08-12 · Updated 2024-03-06 · CVE-2021-37644

Positive Technologies (AI Summary)

CVSS v4.0

5.7

Medium

Base vector

AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.6.0 TensorFlow version 2.5.1 TensorFlow version 2.4.3 TensorFlow version 2.3.4

Description The issue arises when a negative element is provided to the num elements list argument of tf.raw ops.TensorListReserve, causing the runtime to abort the process due to reallocating a std::vector to have a negative number of elements. This occurs because the implementation calls std::vector.resize() with the new size controlled by input given by the user, without checking that this input is valid.

Recommendations For TensorFlow versions prior to 2.6.0, update to version 2.6.0 or later. For TensorFlow version 2.5.1, apply the patch from GitHub commit 8a6e874437670045e6c7dc6154c7412b4a2135e2. For TensorFlow version 2.4.3, apply the patch from GitHub commit 8a6e874437670045e6c7dc6154c7412b4a2135e2. For TensorFlow version 2.3.4, apply the patch from GitHub commit 8a6e874437670045e6c7dc6154c7412b4a2135e2. As a temporary workaround, consider avoiding the use of negative elements in the num elements list argument of tf.raw ops.TensorListReserve until a patch is applied.

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

BIT-TENSORFLOW-2021-37644

CVE-2021-37644

GHSA-27J5-4P9V-PP67

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2021-266

PYSEC-2021-557

PYSEC-2021-755

Affected Products

Tensorflow

References · 87

• https://github.com/tensorflow/tensorflow/commit/8a6e874437670045e6c7dc6154c7412b4a2135e2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-37644 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-27j5-4p9v-pp67 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-557 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-755 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-266 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37644 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-37644 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-27j5-4p9v-pp67 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-755.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-266.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-557.yaml · Note
• https://suse.com/security/cve/CVE-2021-37656 · Note