PT-2021-23177 · Google · Tensorflow

Pkanwar23 · Published 2021-11-05 · Updated 2024-03-06 · CVE-2021-41205

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier

Description The shape inference functions for the QuantizeAndDequantizeV* operations can trigger a read outside of bounds of heap allocated array. This issue is caused by the code ignoring occurrences of negative axis values, other than -1, which is used for optional or unknown dimensions. The issue can be exploited by passing a negative axis value to the QuantizeAndDequantizeV* operations.

Recommendations For versions prior to 2.7.0, update to TensorFlow 2.7.0 or later. For versions 2.6.1 and earlier, update to TensorFlow 2.6.1 or later. For versions 2.5.2 and earlier, update to TensorFlow 2.5.2 or later. For versions 2.4.4 and earlier, update to TensorFlow 2.4.4 or later. As a temporary workaround, consider avoiding the use of negative axis values in the QuantizeAndDequantizeV* operations until a patch is available.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BIT-TENSORFLOW-2021-41205

CVE-2021-41205

GHSA-49RX-X2RW-PC6F

OPENSUSE-SU-2024:12116-1

PYSEC-2021-398

PYSEC-2021-615

PYSEC-2021-813

Affected Products

Tensorflow

References · 13

• https://github.com/tensorflow/tensorflow/commit/7cf73a2274732c9d82af51c2bc2cf90d13cd7e6d · Patch
• https://osv.dev/vulnerability/GHSA-49rx-x2rw-pc6f · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-41205 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-398 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41205 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-615 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-813 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-41205 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rx-x2rw-pc6f · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-813.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-398.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-615.yaml · Note