PT-2022-23063 · Google · Tensorflow

Neophytos Christou · Published 2022-09-16 · Updated 2024-03-06 · CVE-2022-35964

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions 2.7.2 through 2.9.1 TensorFlow version 2.10.0 is not affected as it includes the fix.

Description The implementation of BlockLSTMGradV2 does not fully validate its inputs, resulting in a segfault that can be used to trigger a denial of service attack. Specifically, the inputs wci, wcf, wco, b must be rank 1, w, cs prev, h prev must be rank 2, and x must be rank 3.

Recommendations For TensorFlow versions 2.7.2, 2.8.1, and 2.9.1, update to the respective patched versions to resolve the issue. For TensorFlow versions prior to 2.7.2, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the use of BlockLSTMGradV2 until a patch is available.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BIT-TENSORFLOW-2022-35964

CVE-2022-35964

GHSA-F7R5-Q7CX-H668

OPENSUSE-SU-2024:12355-1

Affected Products

Tensorflow

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35964.json · Exploit
• https://github.com/tensorflow/tensorflow/commit/2a458fc4866505be27c62f81474ecb2b870498fa · Patch
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f7r5-q7cx-h668 · Patch
• https://osv.dev/vulnerability/BIT-tensorflow-2022-35964 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-35964 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f7r5-q7cx-h668 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35964 · Security Note
• https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://t.me/cibsecurity/50001 · Telegram Post