PT-2021-21799 · Google · Tensorflow

Yakun Zhang · Published 2021-08-12 · Updated 2024-03-06 · CVE-2021-37680

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier

Description The implementation of fully connected layers in TFLite is vulnerable to a division by zero error. An attacker can craft a model such that filter->dims->data[1] is 0, causing the error. The issue has been reported by members of the Aivul Team from Qihoo 360 and Yakun Zhang of Baidu Security.

Recommendations For TensorFlow versions prior to 2.6.0, update to version 2.6.0 or later. For TensorFlow versions 2.5.1 and earlier, update to version 2.5.1 or later, or apply the patch from GitHub commit 718721986aa137691ee23f03638867151f74935f. For TensorFlow versions 2.4.3 and earlier, update to version 2.4.3 or later, or apply the patch from GitHub commit 718721986aa137691ee23f03638867151f74935f. For TensorFlow versions 2.3.4 and earlier, update to version 2.3.4 or later, or apply the patch from GitHub commit 718721986aa137691ee23f03638867151f74935f. As a temporary workaround, consider restricting the use of fully connected layers in TFLite until a patch is available.

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

BIT-TENSORFLOW-2021-37680

CVE-2021-37680

GHSA-CFPJ-3Q4C-JHVR

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2021-302

PYSEC-2021-593

PYSEC-2021-791

Affected Products

Tensorflow

References · 88

• https://github.com/tensorflow/tensorflow/commit/718721986aa137691ee23f03638867151f74935f · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-593 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-37680 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-791 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37680 · Security Note
• https://osv.dev/vulnerability/CVE-2021-37680 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cfpj-3q4c-jhvr · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-302 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cfpj-3q4c-jhvr · Note
• https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/fully_connected.cc#L226 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-791.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-302.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-593.yaml · Note