PT-2022-15075 · Google · Tensorflow

Faysal Hossain Shezan · Published 2022-02-03 · Updated 2024-03-06 · CVE-2022-21735

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1, 2.6.3, and 2.5.3 are also affected

Description The implementation of FractionalMaxPool can be made to crash a TensorFlow process via a division by 0. This issue can be exploited by providing specific inputs to the FractionalMaxPool function, such as a pooling ratio that causes a division by zero. The FractionalMaxPool function is used in TensorFlow for max pooling operations.

Recommendations For TensorFlow versions prior to 2.8.0, update to version 2.8.0 or later to resolve the issue. For TensorFlow version 2.7.1, update to a patched version that includes the fix for this issue. For TensorFlow version 2.6.3, update to a patched version that includes the fix for this issue. For TensorFlow version 2.5.3, update to a patched version that includes the fix for this issue. As a temporary workaround, consider avoiding the use of the FractionalMaxPool function until a patch is available.

Exploit

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

BIT-TENSORFLOW-2022-21735

CVE-2022-21735

GHSA-87V6-CRGM-2GFJ

OPENSUSE-SU-2024:12116-1

PYSEC-2022-114

PYSEC-2022-59

Affected Products

Tensorflow

References · 14

• 🔥 https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/fractional_max_pool_op.cc#L36-L192 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/21xxx/CVE-2022-21735.json · Exploit
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-87v6-crgm-2gfj · Patch
• https://github.com/tensorflow/tensorflow/commit/ba4e8ac4dc2991e350d5cc407f8598c8d4ee70fb · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-21735 · Security Note
• https://osv.dev/vulnerability/PYSEC-2022-114 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-21735 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-87v6-crgm-2gfj · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-21735 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-59 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-114.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-59.yaml · Note
• https://t.me/cibsecurity/36774 · Telegram Post