PT-2022-16104 · Google · Tensorflow

Mihaimaruseac · Published 2022-02-04 · Updated 2024-03-06 · CVE-2022-23587

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1 and earlier TensorFlow versions 2.6.3 and earlier TensorFlow versions 2.5.3 and earlier

Description The Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user-controlled, a malicious person can trigger undefined behavior.

Recommendations For versions prior to 2.8.0, update to TensorFlow 2.8.0 or later. For versions prior to 2.7.1, update to TensorFlow 2.7.1 or later. For versions prior to 2.6.3, update to TensorFlow 2.6.3 or later. For versions prior to 2.5.3, update to TensorFlow 2.5.3 or later. As a temporary workaround, consider restricting user control over cropping parameters to minimize the risk of exploitation.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BIT-TENSORFLOW-2022-23587

CVE-2022-23587

GHSA-8JJ7-5VXC-PG2Q

OPENSUSE-SU-2024:12116-1

PYSEC-2022-151

PYSEC-2022-96

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L2621-L2689 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23587.json · Exploit
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8jj7-5vxc-pg2q · Patch
• https://github.com/tensorflow/tensorflow/commit/0aaaae6eca5a7175a193696383f582f53adab23f · Patch
• https://osv.dev/vulnerability/PYSEC-2022-151 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8jj7-5vxc-pg2q · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23587 · Security Note
• https://osv.dev/vulnerability/CVE-2022-23587 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-96 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-23587 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-151.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-96.yaml · Note