PT-2021-23173 · Google · Tensorflow

Mihaimaruseac · Published 2021-11-05 · Updated 2024-03-06 · CVE-2021-41201

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier

Description The issue arises during execution when EinsumHelper::ParseEquation() is supposed to set flags in the input has ellipsis vector and the *output has ellipsis boolean to indicate whether there is an ellipsis in the corresponding inputs and output. However, the code only changes these flags to true and never assigns false, resulting in uninitialized variable access if callers assume that EinsumHelper::ParseEquation() always sets these flags.

Recommendations For TensorFlow versions prior to 2.7.0, update to version 2.7.0 or later. For TensorFlow versions 2.6.1 and earlier, update to version 2.6.1 or later. For TensorFlow versions 2.5.2 and earlier, update to version 2.5.2 or later. For TensorFlow versions 2.4.4 and earlier, update to version 2.4.4 or later.

Exploit

Fix

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

BIT-TENSORFLOW-2021-41201

CVE-2021-41201

GHSA-J86V-P27C-73FM

OPENSUSE-SU-2024:12116-1

PYSEC-2021-394

PYSEC-2021-611

PYSEC-2021-809

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j86v-p27c-73fm · Exploit
• https://github.com/tensorflow/tensorflow/commit/f09caa532b6e1ac8d2aa61b7832c78c5b79300c6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-41201 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-611 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-809 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-41201 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-41201 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-394 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-j86v-p27c-73fm · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-394.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-611.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-809.yaml · Note