PT-2022-15082 · Google · Tensorflow

Wang Xuan · Published 2022-02-03 · Updated 2024-03-06 · CVE-2022-21741

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1, 2.6.3, and 2.5.3 are also affected

Description An attacker can craft a TFLite model to trigger a division by zero in the implementation of depthwise convolutions. The parameters of the convolution, which are user-controlled, are used in a division operation to determine the padding size before applying the convolution. There is no check to ensure the divisor is strictly positive.

Recommendations For versions prior to 2.8.0, update to TensorFlow 2.8.0 or later. For version 2.7.1, update to a version that includes the cherrypicked commit. For version 2.6.3, update to a version that includes the cherrypicked commit. For version 2.5.3, update to a version that includes the cherrypicked commit. As a temporary workaround, consider restricting the use of user-controlled convolution parameters to minimize the risk of exploitation.

Exploit

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

BIT-TENSORFLOW-2022-21741

CVE-2022-21741

GHSA-428X-9XC2-M8MJ

OPENSUSE-SU-2024:12116-1

PYSEC-2022-120

PYSEC-2022-65

Affected Products

Tensorflow

References · 14

• 🔥 https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/lite/kernels/depthwise_conv.cc#L96 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/21xxx/CVE-2022-21741.json · Exploit
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-428x-9xc2-m8mj · Patch
• https://github.com/tensorflow/tensorflow/commit/e5b0eec199c2d03de54fd6a7fd9275692218e2bc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-21741 · Security Note
• https://osv.dev/vulnerability/PYSEC-2022-65 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-21741 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-21741 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-428x-9xc2-m8mj · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-120 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-65.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-120.yaml · Note
• https://t.me/cibsecurity/36782 · Telegram Post