PT-2022-16092 · Google · Tensorflow

Mihaimaruseac · Published 2022-02-04 · Updated 2024-03-06 · CVE-2022-23575

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1 and earlier TensorFlow versions 2.6.3 and earlier TensorFlow versions 2.5.3 and earlier

Description The implementation of OpLevelCostEstimator::CalculateTensorSize is vulnerable to an integer overflow if an attacker can create an operation which would involve a tensor with large enough number of elements. This occurs because count and size can be large enough to cause count * size to overflow.

Recommendations For versions prior to 2.8.0, update to TensorFlow 2.8.0 or later. For versions 2.7.1 and earlier, update to TensorFlow 2.7.1 or later. For versions 2.6.3 and earlier, update to TensorFlow 2.6.3 or later. For versions 2.5.3 and earlier, update to TensorFlow 2.5.3 or later. As a temporary workaround, consider restricting the creation of operations involving large tensors until a patch is available.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BIT-TENSORFLOW-2022-23575

CVE-2022-23575

GHSA-C94W-C95P-PHF8

OPENSUSE-SU-2024:12116-1

PYSEC-2022-139

PYSEC-2022-84

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L1552-L1558 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23575.json · Exploit
• https://github.com/tensorflow/tensorflow/commit/fcd18ce3101f245b083b30655c27b239dc72221e · Patch
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c94w-c95p-phf8 · Patch
• https://osv.dev/vulnerability/GHSA-c94w-c95p-phf8 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-84 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-139 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-23575 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23575 · Security Note
• https://osv.dev/vulnerability/CVE-2022-23575 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-139.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-84.yaml · Note