PT-2022-16072 · Google · Tensorflow

Wang Xuan · Published 2022-02-04 · Updated 2024-03-06 · CVE-2022-23557

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1, 2.6.3, and 2.5.3 are also affected

Description An attacker can craft a TFLite model that would trigger a division by zero in the BiasAndClamp implementation. There is no check that the bias size is non zero. The issue is related to the BiasAndClamp function, which does not verify if the bias size is non-zero before performing operations.

Recommendations For versions prior to 2.8.0, update to TensorFlow 2.8.0 or later. For version 2.7.1, update to a version that includes the cherrypicked commit. For version 2.6.3, update to a version that includes the cherrypicked commit. For version 2.5.3, update to a version that includes the cherrypicked commit. As a temporary workaround, consider disabling the BiasAndClamp function until a patch is available.

Exploit

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

BIT-TENSORFLOW-2022-23557

CVE-2022-23557

GHSA-GF2J-F278-XH4V

OPENSUSE-SU-2024:12116-1

PYSEC-2022-121

PYSEC-2022-66

Affected Products

Tensorflow

References · 14

• 🔥 https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/lite/kernels/internal/common.h#L75 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23557.json · Exploit
• https://github.com/tensorflow/tensorflow/commit/8c6f391a2282684a25cbfec7687bd5d35261a209 · Patch
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gf2j-f278-xh4v · Patch
• https://osv.dev/vulnerability/BIT-tensorflow-2022-23557 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23557 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gf2j-f278-xh4v · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23557 · Security Note
• https://osv.dev/vulnerability/PYSEC-2022-66 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-121 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-66.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-121.yaml · Note
• https://t.me/cibsecurity/36893 · Telegram Post