PT-2022-26114 · Google · Tensorflow

Zizhuang Deng · Published 2022-11-18 · Updated 2024-03-06 · CVE-2022-41883

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow version 2.10.1 TensorFlow version 2.9.3 TensorFlow version 2.8.4

Description The issue occurs when ops with specified input sizes receive a differing number of inputs, causing the executor to crash. This is demonstrated in the tf.raw ops.DynamicStitch operation, which specifies input sizes when registered. When it receives a differing number of inputs, such as when called with an indices size 1 and a data size 2, it will crash. The estimated number of potentially affected devices is not provided.

Recommendations For TensorFlow versions prior to 2.11, update to version 2.11 or later. For TensorFlow version 2.10.1, apply the patch from GitHub commit f5381e0e10b5a61344109c1b7c174c68110f7629 or update to a later version. For TensorFlow version 2.9.3, apply the patch from GitHub commit f5381e0e10b5a61344109c1b7c174c68110f7629 or update to a later version. For TensorFlow version 2.8.4, apply the patch from GitHub commit f5381e0e10b5a61344109c1b7c174c68110f7629 or update to a later version. As a temporary workaround, consider avoiding the use of the tf.raw ops.DynamicStitch operation with differing input sizes until a patch is applied or the version is updated.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BIT-TENSORFLOW-2022-41883

CVE-2022-41883

GHSA-W58W-79XV-6VCJ

Affected Products

Tensorflow

References · 10

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w58w-79xv-6vcj · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41883.json · Exploit
• https://github.com/tensorflow/tensorflow/commit/f5381e0e10b5a61344109c1b7c174c68110f7629 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-41883 · Security Note
• https://osv.dev/vulnerability/BIT-tensorflow-2022-41883 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w58w-79xv-6vcj · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41883 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/dynamic_stitch_op.cc · Note
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ops/data_flow_ops.cc · Note
• https://github.com/tensorflow/tensorflow · Note