Lucene search

GitHub Advisory DatabaseGHSA-5F2R-QP73-37MR

HistoryFeb 10, 2022 - 12:33 a.m.

`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow

2022-02-1000:33:29

CWE-617

GitHub Advisory Database

github.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

52.0%

JSON

Impact

The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a SavedModel such that SafeToRemoveIdentity would trigger CHECK failures.

Patches

We have patched the issue in GitHub commit 92dba16749fae36c246bec3f9ba474d9ddeb7662.
The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

Affected configurations

Vulners

Node

tensorflowgpuMatch2.7.0

tensorflowgpuRange<2.6.3

tensorflowgpuRange<2.5.3

tensorflowcpuMatch2.7.0

tensorflowcpuRange<2.6.3

tensorflowcpuRange<2.5.3

tensorflowtensorflowMatch2.7.0

tensorflowtensorflowRange<2.6.3

tensorflowtensorflowRange<2.5.3

CPENameOperatorVersion
tensorflow-gpueq2.7.0
tensorflow-gpult2.6.3
tensorflow-gpult2.5.3
tensorflow-cpueq2.7.0
tensorflow-cpult2.6.3
tensorflow-cpult2.5.3
tensorfloweq2.7.0
tensorflowlt2.6.3
tensorflowlt2.5.3

Name	Operator	Version
tensorflow-gpu	eq	2.7.0
tensorflow-gpu	lt	2.6.3
tensorflow-gpu	lt	2.5.3
tensorflow-cpu	eq	2.7.0
tensorflow-cpu	lt	2.6.3
tensorflow-cpu	lt	2.5.3
tensorflow	eq	2.7.0
tensorflow	lt	2.6.3
tensorflow	lt	2.5.3

References

github.com/advisories/GHSA-5f2r-qp73-37mr

github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/dependency_optimizer.cc#L59-L98

github.com/tensorflow/tensorflow/commit/92dba16749fae36c246bec3f9ba474d9ddeb7662

github.com/tensorflow/tensorflow/security/advisories/GHSA-5f2r-qp73-37mr

nvd.nist.gov/vuln/detail/CVE-2022-23579

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

52.0%

JSON

Related for GHSA-5F2R-QP73-37MR