PT-2021-21808 · Google · Tensorflow

Yakun Zhang · Published 2021-08-12 · Updated 2024-03-06 · CVE-2021-37689

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier

Description An attacker can craft a TFLite model that would trigger a null pointer dereference, which would result in a crash and denial of service. This is caused by the MLIR optimization of L2NormalizeReduceAxis operator. The implementation unconditionally dereferences a pointer to an iterator to a vector without checking that the vector has elements.

Recommendations For versions prior to 2.6.0, update to TensorFlow 2.6.0 or later. For versions 2.5.1 and earlier, update to TensorFlow 2.5.1 or later, or apply the patch from GitHub commit d6b57f461b39fd1aa8c1b870f1b974aac3554955. For versions 2.4.3 and earlier, update to TensorFlow 2.4.3 or later, or apply the patch from GitHub commit d6b57f461b39fd1aa8c1b870f1b974aac3554955. For versions 2.3.4 and earlier, update to TensorFlow 2.3.4 or later, or apply the patch from GitHub commit d6b57f461b39fd1aa8c1b870f1b974aac3554955. As a temporary workaround, consider disabling the L2NormalizeReduceAxis operator until a patch is available.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BIT-TENSORFLOW-2021-37689

CVE-2021-37689

GHSA-WF5P-C75W-W3WH

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2021-311

PYSEC-2021-602

PYSEC-2021-800

Affected Products

Tensorflow

References · 88

• https://github.com/tensorflow/tensorflow/commit/d6b57f461b39fd1aa8c1b870f1b974aac3554955 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37689 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37689 · Security Note
• https://osv.dev/vulnerability/GHSA-wf5p-c75w-w3wh · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-311 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-37689 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-800 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-602 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wf5p-c75w-w3wh · Note
• https://github.com/tensorflow/tensorflow/blob/149562d49faa709ea80df1d99fc41d005b81082a/tensorflow/compiler/mlir/lite/transforms/optimize.cc#L67-L70 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-800.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-602.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-311.yaml · Note