PT-2023-20223 · Google · Tensorflow

R3Pwnx · Published 2023-03-24 · Updated 2024-03-06 · CVE-2023-25662

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.12.0 TensorFlow versions prior to 2.11.1

Description The issue is related to an integer overflow in the EditDistance function of TensorFlow, which can cause a deadlock when the hypothesis shape t is empty. This occurs because hypothesis shape t->NumElements() - 1 will result in an integer overflow. The vulnerability can be exploited by passing a specific set of parameters to the tf.raw ops.EditDistance function, including empty hypothesis shape and truth shape.

Recommendations For versions prior to 2.12.0, update to TensorFlow version 2.12.0 to resolve the issue. For versions prior to 2.11.1, update to TensorFlow version 2.11.1 to resolve the issue. As a temporary workaround, consider avoiding the use of the tf.raw ops.EditDistance function with empty hypothesis shape and truth shape parameters until a patch is applied.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

AZL-31209

AZL-35307

BIT-TENSORFLOW-2023-25662

CVE-2023-25662

GHSA-7JVM-XXMR-V5CW

Affected Products

Tensorflow

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25662.json · Exploit
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7jvm-xxmr-v5cw · Vendor Advisory
• https://github.com/tensorflow/tensorflow/commit/08b8e18643d6dcde00890733b270ff8d9960c56c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-25662 · Security Note
• https://osv.dev/vulnerability/AZL-31209 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7jvm-xxmr-v5cw · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2023-25662 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-25662 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-35307 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://t.me/cvenotify/47189 · Telegram Post
• https://t.me/cibsecurity/60726 · Telegram Post