Lucene search

GoogleOSV:BIT-TENSORFLOW-2022-29204

HistoryMar 06, 2024 - 11:14 a.m.

BIT-tensorflow-2022-29204

2024-03-0611:14:25

Google

osv.dev

tensorflow

machine learning

unsortedsegmentjoin

input validation

denial of service

vulnerability

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

JSON

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of tf.raw_ops.UnsortedSegmentJoin does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack. The code assumes num_segments is a positive scalar but there is no validation. Since this value is used to allocate the output tensor, a negative value would result in a CHECK-failure (assertion failure), as per TFSA-2021-198. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

CPENameOperatorVersion
tensorflowle2.8.0-rc1
tensorflowge2.7.0
tensorflowge2.7.0-rc0
tensorflowge2.8.0
tensorflowle2.7.0-rc1
tensorflowle2.9.0-rc1
tensorflowge2.8.0-rc1
tensorflowle2.7.0-rc0
tensorflowlt2.7.2
tensorflowlt2.6.4

Name	Operator	Version
tensorflow	le	2.8.0-rc1
tensorflow	ge	2.7.0
tensorflow	ge	2.7.0-rc0
tensorflow	ge	2.8.0
tensorflow	le	2.7.0-rc1
tensorflow	le	2.9.0-rc1
tensorflow	ge	2.8.0-rc1
tensorflow	le	2.7.0-rc0
tensorflow	lt	2.7.2
tensorflow	lt	2.6.4

Rows per page:

1-10 of 171

References

github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/unsorted_segment_join_op.cc#L83-L14

github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2021-198.md

github.com/tensorflow/tensorflow/commit/20cb18724b0bf6c09071a3f53434c4eec53cc147

github.com/tensorflow/tensorflow/commit/84563f265f28b3c36a15335c8b005d405260e943

github.com/tensorflow/tensorflow/releases/tag/v2.6.4

github.com/tensorflow/tensorflow/releases/tag/v2.7.2

github.com/tensorflow/tensorflow/releases/tag/v2.8.1

github.com/tensorflow/tensorflow/releases/tag/v2.9.0

github.com/tensorflow/tensorflow/security/advisories/GHSA-hx9q-2mx4-m4pg

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

JSON

Related for OSV:BIT-TENSORFLOW-2022-29204