PT-2022-16105 · Google · Tensorflow

Mihaimaruseac · Published 2022-02-04 · Updated 2024-03-06 · CVE-2022-23588

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.0 through 2.7.0 (will be fixed in 2.7.1) TensorFlow versions 2.6.0 through 2.6.2 (will be fixed in 2.6.3) TensorFlow versions 2.5.0 through 2.5.2 (will be fixed in 2.5.3)

Description A malicious user can cause a denial of service by altering a SavedModel such that the Grappler optimizer would attempt to build a tensor using a reference dtype. This would result in a crash due to a CHECK-fail in the Tensor constructor as reference types are not allowed.

Recommendations For TensorFlow versions prior to 2.5.3, update to version 2.5.3 or later. For TensorFlow versions 2.5.3 to 2.6.2, update to version 2.6.3 or later. For TensorFlow versions 2.6.3 to 2.7.0, update to version 2.7.1 or later. For TensorFlow versions 2.7.1 and earlier, update to version 2.8.0 or later. As a temporary workaround, consider restricting the use of the SavedModel feature until a patch is available.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

BIT-TENSORFLOW-2022-23588

CVE-2022-23588

GHSA-FX5C-H9F6-RV7C

OPENSUSE-SU-2024:12116-1

PYSEC-2022-152

PYSEC-2022-97

Affected Products

Tensorflow

References · 14

• 🔥 https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/tensor.cc#L733-L781 · Exploit
• 🔥 https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L1328-L1402 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23588.json · Exploit
• https://github.com/tensorflow/tensorflow/commit/6b5adc0877de832b2a7c189532dbbbc64622eeb6 · Patch
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fx5c-h9f6-rv7c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-23588 · Security Note
• https://osv.dev/vulnerability/PYSEC-2022-97 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23588 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-fx5c-h9f6-rv7c · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-152 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-23588 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-97.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-152.yaml · Note