PT-2021-21766 · Google · Tensorflow

Mihaimaruseac · Published 2021-08-12 · Updated 2024-03-06 · CVE-2021-37650

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier

Description The implementation for tf.raw ops.ExperimentalDatasetToTFRecord and tf.raw ops.DatasetToTFRecord can trigger heap buffer overflow and segmentation fault. The implementation assumes that all records in the dataset are of string type, but there is no check for that, and examples given use numeric types.

Recommendations For versions prior to 2.6.0, update to TensorFlow 2.6.0 or later. For versions 2.5.1 and earlier, update to TensorFlow 2.5.1 or later, or apply the patch from GitHub commit e0b6e58c328059829c3eb968136f17aa72b6c876. For versions 2.4.3 and earlier, update to TensorFlow 2.4.3 or later, or apply the patch from GitHub commit e0b6e58c328059829c3eb968136f17aa72b6c876. For versions 2.3.4 and earlier, update to TensorFlow 2.3.4 or later, or apply the patch from GitHub commit e0b6e58c328059829c3eb968136f17aa72b6c876. As a temporary workaround, consider disabling the tf.raw ops.ExperimentalDatasetToTFRecord and tf.raw ops.DatasetToTFRecord functions until a patch is available.

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-120

CWE-787

Related Identifiers

BIT-TENSORFLOW-2021-37650

CVE-2021-37650

GHSA-F8H4-7RGH-Q2GM

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2021-272

PYSEC-2021-563

PYSEC-2021-761

Affected Products

Tensorflow

References · 87

• https://github.com/tensorflow/tensorflow/commit/e0b6e58c328059829c3eb968136f17aa72b6c876 · Patch
• https://osv.dev/vulnerability/PYSEC-2021-761 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-37650 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-272 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37650 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37650 · Security Note
• https://osv.dev/vulnerability/GHSA-f8h4-7rgh-q2gm · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-563 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f8h4-7rgh-q2gm · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-272.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-761.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-563.yaml · Note
• https://suse.com/security/cve/CVE-2021-37656 · Note