PT-2022-19450 · Google · Tensorflow
Neophytos Christou
·
Published
2022-05-20
·
Updated
2024-03-06
·
CVE-2022-29198
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
TensorFlow versions prior to 2.9.0
TensorFlow versions prior to 2.8.1
TensorFlow versions prior to 2.7.2
TensorFlow versions prior to 2.6.4
Description
The implementation of
tf.raw ops.SparseTensorToCSRSparseMatrix does not fully validate the input arguments, resulting in a CHECK-failure that can be used to trigger a denial of service attack. The code assumes dense shape is a vector and indices is a matrix, but there is no validation for this.Recommendations
For versions prior to 2.9.0, update to version 2.9.0 or later.
For versions prior to 2.8.1, update to version 2.8.1 or later.
For versions prior to 2.7.2, update to version 2.7.2 or later.
For versions prior to 2.6.4, update to version 2.6.4 or later.
As a temporary workaround, consider disabling the
tf.raw ops.SparseTensorToCSRSparseMatrix function until a patch is available.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tensorflow