PT-2022-26127 · Google · Tensorflow

Yu Tian · Published 2022-11-18 · Updated 2024-03-06 · CVE-2022-41896

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1, 2.9.3, and 2.8.4

Description TensorFlow is an open source platform for machine learning. If ThreadUnsafeUnigramCandidateSampler is given input filterbank channel count greater than the allowed max size, TensorFlow will crash.

Recommendations For TensorFlow versions prior to 2.11, update to version 2.11 or later. For TensorFlow version 2.10.1, update to a version that includes the patch from GitHub commit 39ec7eaf1428e90c37787e5b3fbd68ebd3c48860. For TensorFlow version 2.9.3, update to a version that includes the patch from GitHub commit 39ec7eaf1428e90c37787e5b3fbd68ebd3c48860. For TensorFlow version 2.8.4, update to a version that includes the patch from GitHub commit 39ec7eaf1428e90c37787e5b3fbd68ebd3c48860. As a temporary workaround, consider restricting the input filterbank channel count to prevent it from exceeding the allowed max size.

Exploit

Fix

RCE

Weakness Enumeration

CWE-1284

CWE-20

Related Identifiers

AZL-11534

BIT-TENSORFLOW-2022-41896

CVE-2022-41896

GHSA-RMG2-F698-WQ35

Affected Products

Tensorflow

References · 11

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rmg2-f698-wq35 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41896.json · Exploit
• https://github.com/tensorflow/tensorflow/commit/39ec7eaf1428e90c37787e5b3fbd68ebd3c48860 · Patch
• https://osv.dev/vulnerability/CVE-2022-41896 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-rmg2-f698-wq35 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-11534 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41896 · Security Note
• https://osv.dev/vulnerability/BIT-tensorflow-2022-41896 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/mirror_pad_op.cc · Note
• https://github.com/tensorflow/tensorflow · Note
• https://t.me/cvenotify/38261 · Telegram Post