PT-2021-21763 · Google · Tensorflow

Published 2021-08-12 · Updated 2024-03-06 · CVE-2021-37648

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier

Description The code for tf.raw ops.SaveV2 does not properly validate the inputs, allowing an attacker to trigger a null pointer dereference. The implementation uses ValidateInputs to check that the input arguments are valid, but the validation uses OP REQUIRES which does not finalize the kernel execution, making it equivalent to lacking the validation.

Recommendations For versions prior to 2.6.0, update to TensorFlow 2.6.0 or later. For versions 2.5.1 and earlier, update to TensorFlow 2.5.1 or later, or apply the patch from GitHub commit 9728c60e136912a12d99ca56e106b7cce7af5986. For versions 2.4.3 and earlier, update to TensorFlow 2.4.3 or later, or apply the patch from GitHub commit 9728c60e136912a12d99ca56e106b7cce7af5986. For versions 2.3.4 and earlier, update to TensorFlow 2.3.4 or later, or apply the patch from GitHub commit 9728c60e136912a12d99ca56e106b7cce7af5986. As a temporary workaround, consider disabling the tf.raw ops.SaveV2 function until a patch is available.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BIT-TENSORFLOW-2021-37648

CVE-2021-37648

GHSA-WP77-4GMM-7CQ8

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2021-270

PYSEC-2021-561

PYSEC-2021-759

Affected Products

Tensorflow

References · 86

• https://github.com/tensorflow/tensorflow/commit/9728c60e136912a12d99ca56e106b7cce7af5986 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-270 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wp77-4gmm-7cq8 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-37648 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37648 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-561 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37648 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-759 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wp77-4gmm-7cq8 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-270.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-561.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-759.yaml · Note
• https://suse.com/security/cve/CVE-2021-37656 · Note