PT-2021-23189 · Google · Tensorflow

Published 2021-11-05 · Updated 2024-03-06 · CVE-2021-41216

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier

Description The shape inference function for Transpose in TensorFlow is vulnerable to a heap buffer overflow. This occurs whenever the perm variable contains negative elements. The shape inference function does not validate that the indices in perm are all valid.

Recommendations For versions prior to 2.7.0, update to TensorFlow 2.7.0 or later. For versions 2.6.1 and earlier, update to TensorFlow 2.6.1 or later. For versions 2.5.2 and earlier, update to TensorFlow 2.5.2 or later. For versions 2.4.4 and earlier, update to TensorFlow 2.4.4 or later. As a temporary workaround, consider validating the indices in the perm variable to ensure they are all valid before using the Transpose function.

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-120

CWE-787

Related Identifiers

BIT-TENSORFLOW-2021-41216

CVE-2021-41216

GHSA-3FF2-R28G-W7H9

OPENSUSE-SU-2024:12116-1

PYSEC-2021-408

PYSEC-2021-625

PYSEC-2021-823

Affected Products

Tensorflow

References · 15

• https://github.com/tensorflow/tensorflow/commit/c79ba87153ee343401dbe9d1954d7f79e521eb14 · Patch
• https://osv.dev/vulnerability/CVE-2021-41216 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-823 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-408 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-625 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3ff2-r28g-w7h9 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41216 · Security Note
• https://osv.dev/vulnerability/BIT-tensorflow-2021-41216 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-3ff2-r28g-w7h9 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/ops/array_ops.cc#L121-L185 · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-625.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-823.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-408.yaml · Note
• https://t.me/cibsecurity/31922 · Telegram Post