PT-2022-16097 · Google · Tensorflow

Mihaimaruseac · Published 2022-02-04 · Updated 2024-03-06 · CVE-2022-23580

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1 and earlier TensorFlow versions 2.6.3 and earlier TensorFlow versions 2.5.3 and earlier

Description During shape inference, TensorFlow can allocate a large vector based on a value from a tensor controlled by the user. The issue arises from the allocation of a vector based on the num dims value, which is controlled by the user through a tensor. This can lead to potential security issues.

Recommendations For versions prior to 2.8.0, update to TensorFlow 2.8.0 or later. For versions prior to 2.7.1, update to TensorFlow 2.7.1 or later. For versions prior to 2.6.3, update to TensorFlow 2.6.3 or later. For versions prior to 2.5.3, update to TensorFlow 2.5.3 or later. As a temporary workaround, consider restricting the input values to prevent large vector allocations until a patch is applied.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

CWE-1284

Related Identifiers

BIT-TENSORFLOW-2022-23580

CVE-2022-23580

GHSA-627Q-G293-49Q7

OPENSUSE-SU-2024:12116-1

PYSEC-2022-144

PYSEC-2022-89

Affected Products

Tensorflow

References · 14

• 🔥 https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape_inference.cc#L788-L790 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23580.json · Exploit
• https://github.com/tensorflow/tensorflow/commit/1361fb7e29449629e1df94d44e0427ebec8c83c7 · Patch
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-627q-g293-49q7 · Patch
• https://osv.dev/vulnerability/GHSA-627q-g293-49q7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23580 · Security Note
• https://osv.dev/vulnerability/PYSEC-2022-144 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23580 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-89 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-23580 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-144.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-89.yaml · Note
• https://t.me/cvenotify/54273 · Telegram Post