PT-2022-26129 · Google · Tensorflow

Jiawei Liu · Published 2022-11-18 · Updated 2024-03-06 · CVE-2022-41898

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1 and earlier TensorFlow versions 2.9.3 and earlier TensorFlow versions 2.8.4 and earlier

Description The issue occurs when the SparseFillEmptyRowsGrad function is given empty inputs, causing TensorFlow to crash. This can be triggered by calling tf.raw ops.SparseFillEmptyRowsGrad with empty reverse index map and grad values lists. The estimated number of potentially affected devices is not specified.

Recommendations For versions prior to 2.11, update to TensorFlow 2.11 or later. For versions 2.10.1 and earlier, update to TensorFlow 2.10.1 or later, or apply the patch from GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8. For versions 2.9.3 and earlier, update to TensorFlow 2.9.3 or later, or apply the patch from GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8. For versions 2.8.4 and earlier, update to TensorFlow 2.8.4 or later, or apply the patch from GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8. As a temporary workaround, consider avoiding the use of the SparseFillEmptyRowsGrad function with empty inputs until a patch is applied.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

AZL-11537

BIT-TENSORFLOW-2022-41898

CVE-2022-41898

GHSA-HQ7G-WWWP-Q46H

Affected Products

Tensorflow

References · 10

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hq7g-wwwp-q46h · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41898.json · Exploit
• https://github.com/tensorflow/tensorflow/commit/af4a6a3c8b95022c351edae94560acc61253a1b8 · Patch
• https://osv.dev/vulnerability/AZL-11537 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-41898 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41898 · Security Note
• https://osv.dev/vulnerability/CVE-2022-41898 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hq7g-wwwp-q46h · Vendor Advisory
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/sparse_fill_empty_rows_op_gpu.cu.cc · Note
• https://github.com/tensorflow/tensorflow · Note