PT-2022-15078 · Google · Tensorflow

Faysal Hossain Shezan · Published 2022-02-03 · Updated 2024-03-06 · CVE-2022-21738

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1 and earlier TensorFlow versions 2.6.3 and earlier TensorFlow versions 2.5.3 and earlier

Description The implementation of SparseCountSparseOutput can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation.

Recommendations For versions prior to 2.8.0, update to TensorFlow 2.8.0 or later. For versions 2.7.1 and earlier, update to TensorFlow 2.7.1 or later. For versions 2.6.3 and earlier, update to TensorFlow 2.6.3 or later. For versions 2.5.3 and earlier, update to TensorFlow 2.5.3 or later. As a temporary workaround, consider avoiding the use of SparseCountSparseOutput until a patch is available.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BIT-TENSORFLOW-2022-21738

CVE-2022-21738

GHSA-X4QX-4FJV-HMW6

OPENSUSE-SU-2024:12116-1

PYSEC-2022-117

PYSEC-2022-62

Affected Products

Tensorflow

References · 14

• 🔥 https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/count_ops.cc#L168-L273 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/21xxx/CVE-2022-21738.json · Exploit
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x4qx-4fjv-hmw6 · Patch
• https://github.com/tensorflow/tensorflow/commit/6f4d3e8139ec724dbbcb40505891c81dd1052c4a · Patch
• https://osv.dev/vulnerability/BIT-tensorflow-2022-21738 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21738 · Security Note
• https://osv.dev/vulnerability/PYSEC-2022-117 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-62 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x4qx-4fjv-hmw6 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-21738 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-117.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-62.yaml · Note
• https://t.me/cibsecurity/36768 · Telegram Post