PT-2021-21771 · Google · Tensorflow

Published 2021-08-12 · Updated 2024-03-06 · CVE-2021-37655

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier

Description An attacker can trigger a read from outside of bounds of heap allocated data by sending invalid arguments to tf.raw ops.ResourceScatterUpdate. The implementation has an incomplete validation of the relationship between the shapes of indices and updates, instead of checking that the shape of indices is a prefix of the shape of updates, code only checks that the number of elements in these two tensors are in a divisibility relationship.

Recommendations For versions prior to 2.6.0, update to TensorFlow 2.6.0 or later. For versions 2.5.1 and earlier, update to TensorFlow 2.5.1 or later. For versions 2.4.3 and earlier, update to TensorFlow 2.4.3 or later. For versions 2.3.4 and earlier, update to TensorFlow 2.3.4 or later. As a temporary workaround, consider restricting the use of tf.raw ops.ResourceScatterUpdate until a patch is available. Avoid using invalid arguments to tf.raw ops.ResourceScatterUpdate until the issue is resolved.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BIT-TENSORFLOW-2021-37655

CVE-2021-37655

GHSA-7FVX-3JFC-2CPC

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2021-277

PYSEC-2021-568

PYSEC-2021-766

Affected Products

Tensorflow

References · 87

• https://github.com/tensorflow/tensorflow/commit/01cff3f986259d661103412a20745928c727326f · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-277 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-568 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7fvx-3jfc-2cpc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37655 · Security Note
• https://osv.dev/vulnerability/CVE-2021-37655 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-37655 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-766 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7fvx-3jfc-2cpc · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-766.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-277.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-568.yaml · Note
• https://suse.com/security/cve/CVE-2021-37656 · Note