PT-2022-16100 · Google · Tensorflow
Mihaimaruseac
·
Published
2022-02-04
·
Updated
2024-03-06
·
CVE-2022-23583
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
TensorFlow versions prior to 2.8.0
TensorFlow versions 2.7.1, 2.6.3, and 2.5.3 are also affected
Description
A malicious user can cause a denial of service by altering a
SavedModel such that any binary op would trigger CHECK failures. This occurs when the protobuf part corresponding to the tensor arguments is modified such that the dtype no longer matches the dtype expected by the op. If Tin and Tout don't match the type of data in out and input * tensors then flat<*> would interpret it wrongly, resulting in a CHECK crash and hence a denial of service.Recommendations
For TensorFlow versions prior to 2.8.0, update to version 2.8.0 or later to resolve the issue.
For TensorFlow version 2.7.1, update to a newer version that includes the cherrypicked commit.
For TensorFlow version 2.6.3, update to a newer version that includes the cherrypicked commit.
For TensorFlow version 2.5.3, update to a newer version that includes the cherrypicked commit.
As a temporary workaround, consider restricting the use of
SavedModel to minimize the risk of exploitation.Exploit
Fix
Type Confusion
Assertion Failure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Tensorflow