PT-2022-15074 · Google · Tensorflow

Faysal Hossain Shezan · Published 2022-02-03 · Updated 2024-03-06 · CVE-2022-21734

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1, 2.6.3, and 2.5.3 are also affected

Description The implementation of MapStage is vulnerable to a CHECK-fail if the key tensor is not a scalar. This issue can be triggered by passing a non-scalar key tensor to the MapStage function. For example, using the tf.raw ops.MapStage function with a key tensor that has a shape of (1,2) can cause the CHECK-fail.

Recommendations For TensorFlow versions prior to 2.8.0, update to version 2.8.0 or later to resolve the issue. For TensorFlow version 2.7.1, update to a patched version that includes the fix for this issue. For TensorFlow version 2.6.3, update to a patched version that includes the fix for this issue. For TensorFlow version 2.5.3, update to a patched version that includes the fix for this issue. As a temporary workaround, consider validating the shape of the key tensor before passing it to the MapStage function to prevent the CHECK-fail.

Exploit

Fix

Type Confusion

Assertion Failure

Weakness Enumeration

CWE-843

CWE-617

Related Identifiers

BIT-TENSORFLOW-2022-21734

CVE-2022-21734

GHSA-GCVH-66FF-4MWM

OPENSUSE-SU-2024:12116-1

PYSEC-2022-113

PYSEC-2022-58

Affected Products

Tensorflow

References · 14

• 🔥 https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/map_stage_op.cc#L519-L550 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/21xxx/CVE-2022-21734.json · Exploit
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gcvh-66ff-4mwm · Patch
• https://github.com/tensorflow/tensorflow/commit/f57315566d7094f322b784947093406c2aea0d7d · Patch
• https://osv.dev/vulnerability/BIT-tensorflow-2022-21734 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-21734 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-58 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21734 · Security Note
• https://osv.dev/vulnerability/PYSEC-2022-113 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gcvh-66ff-4mwm · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-58.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-113.yaml · Note
• https://t.me/cibsecurity/36771 · Telegram Post