PT-2021-23167 · Google · Tensorflow

Mihaimaruseac · Published 2021-11-05 · Updated 2024-03-06 · CVE-2021-41195

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier

Description The implementation of tf.math.segment * operations results in a CHECK-fail related abort (and denial of service) if a segment id in segment ids is large. This issue is similar to previously reported vulnerabilities in TensorFlow, where the implementation computes the output shape using AddDim. However, if the number of elements in the tensor overflows an int64 t value, AddDim results in a CHECK failure which provokes a std::abort. Instead, code should use AddDimWithStatus.

Recommendations For versions prior to 2.7.0, update to TensorFlow 2.7.0 or later. For versions 2.6.1 and earlier, update to TensorFlow 2.6.1 or later. For versions 2.5.2 and earlier, update to TensorFlow 2.5.2 or later. For versions 2.4.4 and earlier, update to TensorFlow 2.4.4 or later. As a temporary workaround, consider avoiding the use of large segment ids in segment ids until a patch is available.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BIT-TENSORFLOW-2021-41195

CVE-2021-41195

GHSA-CQ76-MXRC-VCHH

OPENSUSE-SU-2024:12116-1

PYSEC-2021-842

PYSEC-2021-844

PYSEC-2021-846

Affected Products

Tensorflow

References · 16

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cq76-mxrc-vchh · Exploit
• https://github.com/tensorflow/tensorflow/issues/46888 · Patch
• https://github.com/tensorflow/tensorflow/pull/51733 · Patch
• https://github.com/tensorflow/tensorflow/commit/e9c81c1e1a9cd8dd31f4e83676cab61b60658429 · Patch
• https://osv.dev/vulnerability/CVE-2021-41195 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-846 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41195 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-842 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cq76-mxrc-vchh · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-844 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-41195 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-842.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-846.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-844.yaml · Note