PT-2022-15076 · Google · Tensorflow

Faysal Hossain Shezan · Published 2022-02-03 · Updated 2024-03-06 · CVE-2022-21736

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1, 2.6.3, and 2.5.3 are also affected

Description The implementation of SparseTensorSliceDataset has an undefined behavior, which can cause a nullptr value to be dereferenced under certain conditions. The 3 input arguments to SparseTensorSliceDataset represent a sparse tensor, but the preconditions for these arguments are not validated in the implementation.

Recommendations For versions prior to 2.8.0, update to TensorFlow 2.8.0 or later to resolve the issue. For version 2.7.1, update to a version that includes the cherrypicked commit. For version 2.6.3, update to a version that includes the cherrypicked commit. For version 2.5.3, update to a version that includes the cherrypicked commit. As a temporary workaround, consider validating the input arguments to SparseTensorSliceDataset to ensure they satisfy the required preconditions.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BIT-TENSORFLOW-2022-21736

CVE-2022-21736

GHSA-PFJJ-M3JJ-9JC9

OPENSUSE-SU-2024:12116-1

PYSEC-2022-115

PYSEC-2022-60

Affected Products

Tensorflow

References · 16

• 🔥 https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/data/sparse_tensor_slice_dataset_op.cc#L227-L292 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/21xxx/CVE-2022-21736.json · Exploit
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pfjj-m3jj-9jc9 · Patch
• https://github.com/tensorflow/tensorflow/commit/965b97e4a9650495cda5a8c210ef6684b4b9eceb · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-21736 · Security Note
• https://osv.dev/vulnerability/GHSA-pfjj-m3jj-9jc9 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-21736 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-21736 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-115 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-60 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-115.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-60.yaml · Note
• https://t.me/cibsecurity/36761 · Telegram Post
• https://t.me/cvenotify/26479 · Telegram Post