PT-2021-23181 · Google · Tensorflow

Mihaimaruseac · Published 2021-11-05 · Updated 2024-03-06 · CVE-2021-41209

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.7.0 TensorFlow version 2.6.1 TensorFlow version 2.5.2 TensorFlow version 2.4.4

Description The implementations for convolution operators in TensorFlow trigger a division by 0 if passed empty filter tensor arguments. This issue affects TensorFlow, an open source platform for machine learning.

Recommendations For versions prior to 2.7.0, update to TensorFlow 2.7.0 or later. For version 2.6.1, apply the cherrypicked commit to resolve the issue. For version 2.5.2, apply the cherrypicked commit to resolve the issue. For version 2.4.4, apply the cherrypicked commit to resolve the issue.

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

BIT-TENSORFLOW-2021-41209

CVE-2021-41209

GHSA-6HPV-V2RX-C5G6

OPENSUSE-SU-2024:12116-1

PYSEC-2021-401

PYSEC-2021-618

PYSEC-2021-816

Affected Products

Tensorflow

References · 16

• https://github.com/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235 · Patch
• https://osv.dev/vulnerability/PYSEC-2021-618 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-401 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41209 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-816 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6hpv-v2rx-c5g6 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-41209 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-41209 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6hpv-v2rx-c5g6 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-618.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-401.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-816.yaml · Note
• https://t.me/cvenotify/23116 · Telegram Post
• https://t.me/cibsecurity/31933 · Telegram Post