PT-2022-19464 · Google · Tensorflow

Published 2022-05-20 · Updated 2024-03-06 · CVE-2022-29211

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.9.0 TensorFlow versions prior to 2.8.1 TensorFlow versions prior to 2.7.2 TensorFlow versions prior to 2.6.4

Description The implementation of tf.histogram fixed width is vulnerable to a crash when the values array contains Not a Number (NaN) elements. This occurs because the implementation assumes all floating point operations are defined and then converts a floating point result to an integer index. If values contains NaN, the result of the division is still NaN and the cast to int32 would result in a crash. This issue only affects the CPU implementation.

Recommendations For versions prior to 2.9.0, update to version 2.9.0 or later. For versions prior to 2.8.1, update to version 2.8.1 or later. For versions prior to 2.7.2, update to version 2.7.2 or later. For versions prior to 2.6.4, update to version 2.6.4 or later. As a temporary workaround, consider avoiding the use of tf.histogram fixed width with arrays containing NaN elements until a patch is applied.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BIT-TENSORFLOW-2022-29211

CVE-2022-29211

GHSA-XRP2-FHQ4-4Q3W

Affected Products

Tensorflow

References · 16

• 🔥 https://github.com/tensorflow/tensorflow/issues/45770 · Exploit
• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xrp2-fhq4-4q3w · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29211.json · Exploit
• https://github.com/tensorflow/tensorflow/commit/e57fd691c7b0fd00ea3bfe43444f30c1969748b5 · Patch
• https://osv.dev/vulnerability/CVE-2022-29211 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-29211 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29211 · Security Note
• https://osv.dev/vulnerability/GHSA-xrp2-fhq4-4q3w · Vendor Advisory
• https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0 · Note
• https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1 · Note
• https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2 · Note
• https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/histogram_op.cc#L35-L74 · Note
• https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/histogram_op.cc · Note