PT-2021-21797 · Google · Tensorflow

Haris Sahovic · Published 2021-08-12 · Updated 2024-03-06 · CVE-2021-37679

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.6.0 TensorFlow version 2.5.1 TensorFlow version 2.4.3 TensorFlow version 2.3.4

Description The issue arises when nesting a tf.map fn within another tf.map fn call, specifically with RaggedTensor inputs and no function signature provided. The code assumes the output is a fully specified tensor and fills the output buffer with uninitialized contents from the heap. This can lead to memory information leaks, as the last row of the output t contains data from the heap. The bug is in the conversion from a Variant tensor to a RaggedTensor, where the implementation does not check for matching inner shapes, resulting in additional dimensions. This can also cause data loss if the input tensor is tweaked.

Recommendations For TensorFlow versions prior to 2.6.0, update to version 2.6.0 or later. For TensorFlow version 2.5.1, apply the patch from GitHub commit 4e2565483d0ffcadc719bd44893fb7f609bb5f12 or update to a later version. For TensorFlow version 2.4.3, apply the patch from GitHub commit 4e2565483d0ffcadc719bd44893fb7f609bb5f12 or update to a later version. For TensorFlow version 2.3.4, apply the patch from GitHub commit 4e2565483d0ffcadc719bd44893fb7f609bb5f12 or update to a later version. As a temporary workaround, consider avoiding the use of nested tf.map fn calls with RaggedTensor inputs until the issue is resolved.

Fix

Out of bounds Read

Weakness Enumeration

CWE-681

CWE-125

Related Identifiers

BIT-TENSORFLOW-2021-37679

CVE-2021-37679

GHSA-G8WG-CJWC-XHHP

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2021-301

PYSEC-2021-592

PYSEC-2021-790

Affected Products

Tensorflow

References · 86

• https://github.com/tensorflow/tensorflow/commit/4e2565483d0ffcadc719bd44893fb7f609bb5f12 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-592 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37679 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-301 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-37679 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g8wg-cjwc-xhhp · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-790 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37679 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g8wg-cjwc-xhhp · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-790.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-301.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-592.yaml · Note
• https://suse.com/security/cve/CVE-2021-37656 · Note