PT-2021-21781 · Google · Tensorflow

Mihaimaruseac · Published 2021-08-12 · Updated 2024-03-06 · CVE-2021-37664

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier

Description An attacker can read from outside of bounds of heap allocated data by sending specially crafted illegal arguments to BoostedTreesSparseCalculateBestFeatureSplit. The implementation needs to validate that each value in stats summary indices is in range.

Recommendations For versions prior to 2.6.0, update to TensorFlow 2.6.0 or later. For versions 2.5.1 and earlier, update to TensorFlow 2.5.1 or later. For versions 2.4.3 and earlier, update to TensorFlow 2.4.3 or later. For versions 2.3.4 and earlier, update to TensorFlow 2.3.4 or later. As a temporary workaround, consider validating the range of stats summary indices before passing it to BoostedTreesSparseCalculateBestFeatureSplit.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BIT-TENSORFLOW-2021-37664

CVE-2021-37664

GHSA-R4C4-5FPQ-56WG

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2021-286

PYSEC-2021-577

PYSEC-2021-775

Affected Products

Tensorflow

References · 87

• https://github.com/tensorflow/tensorflow/commit/e84c975313e8e8e38bb2ea118196369c45c51378 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37664 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-775 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-577 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-37664 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-286 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37664 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r4c4-5fpq-56wg · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r4c4-5fpq-56wg · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-286.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-577.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-775.yaml · Note
• https://suse.com/security/cve/CVE-2021-37656 · Note