PT-2021-21761 · Google · Tensorflow

Published 2021-08-12 · Updated 2024-03-06 · CVE-2021-37646

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier

Description The implementation of tf.raw ops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The issue arises when the reserve method calls TF TString Reserve with a negative value for ngram widths, which is then implicitly converted to a large integer. This can occur when a user supplies negative ngram widths.

Recommendations For versions prior to 2.6.0, update to TensorFlow 2.6.0 or later. For versions 2.5.1 and earlier, update to TensorFlow 2.5.1 or later, or apply the patch from GitHub commit c283e542a3f422420cfdb332414543b62fc4e4a5. For versions 2.4.3 and earlier, update to TensorFlow 2.4.3 or later, or apply the patch from GitHub commit c283e542a3f422420cfdb332414543b62fc4e4a5. For versions 2.3.4 and earlier, update to TensorFlow 2.3.4 or later, or apply the patch from GitHub commit c283e542a3f422420cfdb332414543b62fc4e4a5. As a temporary workaround, consider restricting the use of the tf.raw ops.StringNGrams function with negative ngram widths until a patch is available.

Fix

Weakness Enumeration

CWE-681

Related Identifiers

BIT-TENSORFLOW-2021-37646

CVE-2021-37646

GHSA-H6JH-7GV5-28VG

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2021-268

PYSEC-2021-559

PYSEC-2021-757

Affected Products

Tensorflow

References · 87

• https://github.com/tensorflow/tensorflow/commit/c283e542a3f422420cfdb332414543b62fc4e4a5 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37646 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-757 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-37646 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37646 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-h6jh-7gv5-28vg · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-559 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-268 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h6jh-7gv5-28vg · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-559.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-268.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-757.yaml · Note
• https://suse.com/security/cve/CVE-2021-37656 · Note