PT-2022-16106 · Google · Tensorflow

Mihaimaruseac · Published 2022-02-04 · Updated 2024-03-06 · CVE-2022-23589

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1 and earlier TensorFlow versions 2.6.3 and earlier TensorFlow versions 2.5.3 and earlier

Description The Grappler component of TensorFlow can trigger a null pointer dereference under certain scenarios. This issue occurs in two places due to the malicious alteration of a SavedModel file. The first instance happens during constant folding when the GraphDef lacks the required nodes for a binary operation, resulting in a null mul *child and incorrect dereference. A similar issue arises during IsIdentityConsumingSwitch.

Recommendations For versions prior to 2.8.0, update to TensorFlow 2.8.0 or later. For versions 2.7.1 and earlier, update to TensorFlow 2.7.1 or later. For versions 2.6.3 and earlier, update to TensorFlow 2.6.3 or later. For versions 2.5.3 and earlier, update to TensorFlow 2.5.3 or later.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BIT-TENSORFLOW-2022-23589

CVE-2022-23589

GHSA-9PX9-73FG-3FQP

OPENSUSE-SU-2024:12116-1

PYSEC-2022-153

PYSEC-2022-98

Affected Products

Tensorflow

References · 16

• 🔥 https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/mutable_graph_view.cc#L59-L74 · Exploit
• 🔥 https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L3466-L3497 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23589.json · Exploit
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9px9-73fg-3fqp · Patch
• https://github.com/tensorflow/tensorflow/commit/045deec1cbdebb27d817008ad5df94d96a08b1bf · Patch
• https://github.com/tensorflow/tensorflow/commit/0a365c029e437be0349c31f8d4c9926b69fa3fa1 · Patch
• https://osv.dev/vulnerability/PYSEC-2022-98 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-153 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23589 · Security Note
• https://osv.dev/vulnerability/BIT-tensorflow-2022-23589 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9px9-73fg-3fqp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23589 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-98.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-153.yaml · Note