PT-2021-21796 · Google · Tensorflow

Arjun Shibu · Published 2021-08-12 · Updated 2024-03-06 · CVE-2021-37678

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier

Description TensorFlow and Keras can be tricked to perform arbitrary code execution when deserializing a Keras model from YAML format. The implementation uses yaml.unsafe load which can perform arbitrary code execution on the input.

Recommendations For versions prior to 2.6.0, update to TensorFlow 2.6.0 or later. For versions 2.5.1 and earlier, update to TensorFlow 2.5.1 or later. For versions 2.4.3 and earlier, update to TensorFlow 2.4.3 or later. For versions 2.3.4 and earlier, update to TensorFlow 2.3.4 or later. As a temporary workaround, consider disabling YAML format support until a patch is available. Restrict access to the models.model from yaml function to minimize the risk of exploitation. Avoid using the yaml.unsafe load function in the affected API endpoint until the issue is resolved.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BIT-TENSORFLOW-2021-37678

CVE-2021-37678

GHSA-R6JX-9G48-2R5R

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2021-300

PYSEC-2021-591

PYSEC-2021-789

Affected Products

Tensorflow

References · 92

• 🔥 https://github.com/fran-CICS/ExploitTensorflowCVE-2021-37678 · Exploit
• https://github.com/tensorflow/tensorflow/commit/23d6383eb6c14084a8fc3bdf164043b974818012 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37678 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37678 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-300 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-37678 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-789 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r6jx-9g48-2r5r · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-591 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-r6jx-9g48-2r5r · Note
• https://github.com/tensorflow/tensorflow/commit/8e47a685785bef8f81bcb996048921dfde08a9ab · Note
• https://github.com/tensorflow/tensorflow/commit/1df5a69e9f1a18a937e7907223066e606bf466b9 · Note
• https://github.com/tensorflow/tensorflow/commit/a09ab4e77afdcc6e1e045c9d41d5edab63aafc1a · Note
• https://github.com/tensorflow/tensorflow · Note