PT-2022-16112 · Google · Tensorflow

Mihaimaruseac · Published 2022-02-04 · Updated 2024-03-06 · CVE-2022-23595

Positive Technologies · (AI Summary)

CVSS v3.1

6.5

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions:

TensorFlow versions prior to 2.8.0

TensorFlow versions 2.7.1 and earlier

TensorFlow versions 2.6.3 and earlier

TensorFlow versions 2.5.3 and earlier

Description:

The issue occurs when building an XLA compilation cache with default settings, triggering a null pointer dereference. In the default scenario, all devices are allowed, so `flr->config proto` is `nullptr`. This happens because the `gpu options` and `visible device list` are accessed without checking if `flr->config proto` is null.

Recommendations:

For versions prior to 2.8.0, update to TensorFlow 2.8.0 or later.

For versions 2.7.1 and earlier, update to TensorFlow 2.7.1 or later.

For versions 2.6.3 and earlier, update to TensorFlow 2.6.3 or later.

For versions 2.5.3 and earlier, update to TensorFlow 2.5.3 or later.

As a temporary workaround, consider modifying the default settings to avoid the null pointer dereference until a patch is available.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BIT-TENSORFLOW-2022-23595

CVE-2022-23595

GHSA-FPCP-9H7M-FFPX

OPENSUSE-SU-2024:12116-1

PYSEC-2022-103

PYSEC-2022-158

Affected Products

Tensorflow

References · 12

• 🔥 https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/compiler/jit/xla_platform_info.cc#L43-L104 · Exploit
• https://github.com/tensorflow/tensorflow/commit/e21af685e1828f7ca65038307df5cc06de4479e8 · Patch
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fpcp-9h7m-ffpx · Patch
• https://osv.dev/vulnerability/PYSEC-2022-103 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-158 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-23595 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23595 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23595 · Security Note
• https://osv.dev/vulnerability/GHSA-fpcp-9h7m-ffpx · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-103.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-158.yaml · Note