PT-2023-20316 · Google · Tensorflow

Dmc1778 · Published 2023-03-24 · Updated 2024-03-06 · CVE-2023-25801

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.12.0 and 2.11.1

Description The issue concerns the nn ops.fractional avg pool v2 and nn ops.fractional max pool v2 functions, which require the first and fourth elements of their pooling ratio parameter to be equal to 1.0, as pooling on batch and channel dimensions is not supported.

Recommendations For versions prior to 2.12.0, update to version 2.12.0 to resolve the issue. For versions prior to 2.11.1, update to version 2.11.1 to resolve the issue. As a temporary workaround, consider restricting the use of the nn ops.fractional avg pool v2 and nn ops.fractional max pool v2 functions until a patch is available, by ensuring the first and fourth elements of the pooling ratio parameter are set to 1.0.

Exploit

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

AZL-31206

AZL-35322

BIT-TENSORFLOW-2023-25801

CVE-2023-25801

GHSA-F49C-87JH-G47Q

Affected Products

Tensorflow

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25801.json · Exploit
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f49c-87jh-g47q · Vendor Advisory
• https://github.com/tensorflow/tensorflow/commit/ee50d1e00f81f62a4517453f721c634bbb478307 · Patch
• https://osv.dev/vulnerability/AZL-35322 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2023-25801 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f49c-87jh-g47q · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-25801 · Security Note
• https://osv.dev/vulnerability/AZL-31206 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-25801 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://t.me/cibsecurity/60722 · Telegram Post
• https://t.me/cvenotify/46846 · Telegram Post