Lucene search

GoogleOSV:BIT-TENSORFLOW-2022-29205

HistoryMar 06, 2024 - 11:14 a.m.

BIT-tensorflow-2022-29205

2024-03-0611:14:23

Google

osv.dev

tensorflow

machine learning

segfault

denial of service

quantized types

kernel

patch

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.7%

JSON

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of service in TensorFlow by calling tf.compat.v1.* ops which don’t yet have support for quantized types, which was added after migration to TensorFlow 2.x. In these scenarios, since the kernel is missing, a nullptr value is passed to ParseDimensionValue for the py_value argument. Then, this is dereferenced, resulting in segfault. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

CPENameOperatorVersion
tensorflowle2.8.0-rc1
tensorflowge2.7.0
tensorflowge2.7.0-rc0
tensorflowge2.8.0
tensorflowle2.7.0-rc1
tensorflowle2.9.0-rc1
tensorflowge2.8.0-rc1
tensorflowle2.7.0-rc0
tensorflowlt2.7.2
tensorflowlt2.6.4

Name	Operator	Version
tensorflow	le	2.8.0-rc1
tensorflow	ge	2.7.0
tensorflow	ge	2.7.0-rc0
tensorflow	ge	2.8.0
tensorflow	le	2.7.0-rc1
tensorflow	le	2.9.0-rc1
tensorflow	ge	2.8.0-rc1
tensorflow	le	2.7.0-rc0
tensorflow	lt	2.7.2
tensorflow	lt	2.6.4

Rows per page:

1-10 of 171

References

github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/python/eager/pywrap_tfe_src.cc#L296-L320

github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/python/eager/pywrap_tfe_src.cc#L480-L482

github.com/tensorflow/tensorflow/commit/237822b59fc504dda2c564787f5d3ad9c4aa62d9

github.com/tensorflow/tensorflow/releases/tag/v2.6.4

github.com/tensorflow/tensorflow/releases/tag/v2.7.2

github.com/tensorflow/tensorflow/releases/tag/v2.8.1

github.com/tensorflow/tensorflow/releases/tag/v2.9.0

github.com/tensorflow/tensorflow/security/advisories/GHSA-54ch-gjq5-4976

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.7%

JSON

Related for OSV:BIT-TENSORFLOW-2022-29205