PT-2021-21782 · Google · Tensorflow

Published 2021-08-12 · Updated 2024-03-06 · CVE-2021-37665

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier

Description In affected versions, due to incomplete validation in MKL implementation of requantization, an attacker can trigger undefined behavior via binding a reference to a null pointer or can access data outside the bounds of heap allocated arrays. The implementation does not validate the dimensions of the input tensor. A similar issue occurs in MklRequantizePerChannelOp, where the implementation does not perform full validation for all the input arguments.

Recommendations For versions prior to 2.6.0, update to TensorFlow 2.6.0 or later. For versions 2.5.1 and earlier, update to TensorFlow 2.5.1 or later. For versions 2.4.3 and earlier, update to TensorFlow 2.4.3 or later. For versions 2.3.4 and earlier, update to TensorFlow 2.3.4 or later. As a temporary workaround, consider disabling the MklRequantizationRangePerChannel and MklRequantizePerChannelOp functions until a patch is available. Restrict access to the vulnerable input tensor to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BIT-TENSORFLOW-2021-37665

CVE-2021-37665

GHSA-V82P-HV3V-P6QP

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2021-287

PYSEC-2021-578

PYSEC-2021-776

Affected Products

Tensorflow

References · 89

• https://github.com/tensorflow/tensorflow/commit/203214568f5bc237603dbab6e1fd389f1572f5c9 · Patch
• https://github.com/tensorflow/tensorflow/commit/9e62869465573cb2d9b5053f1fa02a81fce21d69 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-37665 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37665 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-287 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-776 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-v82p-hv3v-p6qp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37665 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-578 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v82p-hv3v-p6qp · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-578.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-776.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-287.yaml · Note