PT-2022-16109 · Google · Tensorflow

Mihaimaruseac · Published 2022-02-04 · Updated 2024-03-06 · CVE-2022-23592

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow version 2.8.0

Description The type inference in TensorFlow can cause a heap out of bounds read due to inadequate bounds checking, which is done in a DCHECK that is a no-op during production. An attacker can manipulate the input idx variable to make ix larger than the number of values in node t.args, leading to the issue.

Recommendations For TensorFlow version 2.8.0, update to a version that includes the fix, which will be available in TensorFlow 2.8.0. As a temporary workaround, consider restricting access to the type inference functionality until the update is applied.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BIT-TENSORFLOW-2022-23592

CVE-2022-23592

GHSA-VQ36-27G6-P492

PYSEC-2022-101

PYSEC-2022-156

Affected Products

Tensorflow

References · 13

• 🔥 https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L223-L229 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23592.json · Exploit
• https://github.com/tensorflow/tensorflow/commit/c99d98cd189839dcf51aee94e7437b54b31f8abd · Patch
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vq36-27g6-p492 · Patch
• https://osv.dev/vulnerability/PYSEC-2022-156 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-23592 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vq36-27g6-p492 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23592 · Security Note
• https://osv.dev/vulnerability/CVE-2022-23592 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-101 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-101.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-156.yaml · Note