Code injection in `saved_model_cli` in TensorFlow

ImpactTensorFlow's savedmodelcli tool is vulnerable to a code injection:savedmodelcli run --inputexprs 'x=print"malicious code to run"' --dir ./--tagset serve --signaturedef servingdefaultThis can be used to open a reverse shell savedmodelcli run --inputexprs 'hello=exec"""\nimport...

CVE-2021-41228

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's savedmodelcli tool is vulnerable to a code injection as it calls eval on user supplied strings. This can be used by attackers to run arbitrary code on the plaform where the CLI tool runs. However, given...

azureml-contrib-brainwave (0.1.68.2), azureml-train-automl (>=0.1.68, <=0.1.80) +5 more potentially affected by CVE-2021-41228 via tensorflow (1.10.0)

tensorflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-contrib-brainwave 0.1.68.2 - azureml-train-automl =0.1.68, =2.0.3, =0.11.9, =0.13.0a5 - scaden 0.9.0 Source cves: CVE-2021-41228...

cellunet (>=0.1.0, <=0.2.2), color2vec (1.0.0) +12 more potentially affected by CVE-2021-41228 via tensorflow (1.8.0)

tensorflow PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cellunet =0.1.0, =0.0.5.1, =0.1.0, =0.1.1.1, =1.1.0, =0.9.0a7, =0.1.0, =0.11.0, =0.4.1, =0.5.2, =0.5.5 Source cves: CVE-2021-41228 Source...

hyperparameter-hunter (>=0.0.1, <=1.0.1), malaya (>=0.6.0.2, <=0.6.4) +2 more potentially affected by CVE-2021-41228 via tensorflow (1.5.0)

tensorflow PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - hyperparameter-hunter =0.0.1, =0.6.0.2, =1.3.6, =1.3.7 - talos 0.6.4 Source cves: CVE-2021-41228 Source advisory: OSV:GHSA-3RCW-9P9X-582V...

es-distributed (0.1.0.dev0), strawberryfields (>=0.7.0, <=0.7.1) +1 more potentially affected by CVE-2021-41228 via tensorflow (1.3.0)

tensorflow PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - es-distributed 0.1.0.dev0 - strawberryfields =0.7.0, =0.7.1 - utensor-cgen 0.0.4 Source cves: CVE-2021-41228 Source advisory:...

iqradre (>=0.1.5, <=0.2.1), lurara (>=0.1.0, <=0.1.1) +7 more potentially affected by CVE-2021-41228 via tensorflow-gpu (2.6.0)

tensorflow-gpu PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - iqradre =0.1.5, =0.1.0, =0.9.0, =1.0.5, =1.0.6 Source cves: CVE-2021-41228 Source advisory: GHSA-3RCW-9P9X-582V...

jlpyutils (>=0.0.7, <=0.1.1) potentially affected by CVE-2021-41228 via tensorflow-gpu (1.12.2)

tensorflow-gpu PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - jlpyutils =0.0.7, =0.1.1 Source cves: CVE-2021-41228 Source advisory: OSV:GHSA-3RCW-9P9X-582V...

bent (>=0.0.9, <=0.0.27), tensorflow-recommenders-addons-gpu (>=0.3.0, <=0.4.1) potentially affected by CVE-2021-41228 via tensorflow-gpu (2.5.1)

tensorflow-gpu PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - bent =0.0.9, =0.3.0, =0.4.1 Source cves: CVE-2021-41228 Source advisory: OSV:GHSA-3RCW-9P9X-582V...

deepdefacer (>=0.0.2, <=1.0.4), delft (>=0.1.2, <=0.2.0) potentially affected by CVE-2021-41228 via tensorflow-gpu (1.8.0)

tensorflow-gpu PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deepdefacer =0.0.2, =0.1.2, =0.2.0 Source cves: CVE-2021-41228 Source advisory: OSV:GHSA-3RCW-9P9X-582V...

mlbench-core (>=2.4.0.dev276, <=2.4.0.dev279), openml-keras (0.0.0) +8 more potentially affected by CVE-2021-41228 via tensorflow (1.13.2)

tensorflow PYPI version 1.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - mlbench-core =2.4.0.dev276, =0.1.0, =0.4.0, =0.14.0, =0.1.4, =0.3.0, =0.3.4 - rasa-print 0.3.1 Source cves: CVE-2021-41228 Source advisory:...

aether (>=0.3.26, <=0.3.32), animalai-train (>=0.4.2, <=0.5.0) +26 more potentially affected by CVE-2021-41228 via tensorflow (1.12.0)

tensorflow PYPI version 1.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - aether =0.3.26, =0.4.2, =1.0.17.1, =0.1.0, =0.3.1, =0.1.0, =0.0.1, =1.0.0, =0.7.0, =0.8.0 and more Source cves: CVE-2021-41228 Source...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), brainhance (0.0.1) +30 more potentially affected by CVE-2021-41228 via tensorflow-gpu (>=2.0.0, <=2.4.2)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =0.0.4, =1.1.1, =1.1.0, =0.1.1, =0.1.0, =0.2.0, =0.6.4, =0.8.2 - maupassant 0.1.1 - mlreflect 0.16.0 - monk-cuda100 0.0.1 and more Source cves: CVE-2021-41228 Source advisory: GHSA-3RCW-9P9X-582V...

bent (>=0.0.9, <=0.0.27), tensorflow-recommenders-addons-gpu (>=0.3.0, <=0.4.1) potentially affected by CVE-2021-41228 via tensorflow-gpu (2.5.1)

tensorflow-gpu PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - bent =0.0.9, =0.3.0, =0.4.1 Source cves: CVE-2021-41228 Source advisory: GHSA-3RCW-9P9X-582V...

diluvian (>=0.0.2, <=0.0.3), guesslang (>=0.9.0rc5, <=0.9.1) +3 more potentially affected by CVE-2021-41228 via tensorflow (1.1.0)

tensorflow PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - diluvian =0.0.2, =0.9.0rc5, =0.9.1 - impyute 0.0.4 - rldqn 0.0.5 - russtress 0.1.0 Source cves: CVE-2021-41228 Source advisory:...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), brainhance (0.0.1) +30 more potentially affected by CVE-2021-41228 via tensorflow-gpu (>=2.0.0, <=2.4.2)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =0.0.4, =1.1.1, =1.1.0, =0.1.1, =0.1.0, =0.2.0, =0.6.4, =0.8.2 - maupassant 0.1.1 - mlreflect 0.16.0 - monk-cuda100 0.0.1 and more Source cves: CVE-2021-41228 Source advisory: OSV:GHSA-3RCW-9P9X-582V...

autogan (0.0.5), deepctr (0.3.3) +8 more potentially affected by CVE-2021-41228 via tensorflow (1.12.3)

tensorflow PYPI version 1.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - autogan 0.0.5 - deepctr 0.3.3 - opveclib 1.0.0 - polyaxon-lib =0.0.3, =0.14.0a5, =0.13.0, =1.0.1, =1.9.1, =0.1.0, =0.3.1 Source cves:...

abmarl (>=0.1.1, <=0.1.3), accuinsight (>=1.0.47, <=3.0.0) +417 more potentially affected by CVE-2021-41228 via tensorflow (>=2.0.0, <=2.4.2)

tensorflow PYPI version =2.0.0, =0.1.1, =1.0.47, =1.0.0, =1.2.0, =1.1.5, =0.0.1, =2.1.0, =0.5.6, =0.5.0, =0.1.0, =0.1.8 and more Source cves: CVE-2021-41228 Source advisory: OSV:PYSEC-2021-420...

iqradre (>=0.1.5, <=0.2.1), lurara (>=0.1.0, <=0.1.1) +7 more potentially affected by CVE-2021-41228 via tensorflow-gpu (2.6.0)

tensorflow-gpu PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - iqradre =0.1.5, =0.1.0, =0.9.0, =1.0.5, =1.0.6 Source cves: CVE-2021-41228 Source advisory: OSV:PYSEC-2021-835...

axelerate (>=0.5.8, <=0.5.9), bianbu-ai-toolkit-tf1 (1.0.6) +27 more potentially affected by CVE-2021-41228 via tensorflow (1.15.3)

tensorflow PYPI version 1.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - axelerate =0.5.8, =0.0.1.2, =0.0.13, =1.1.0, =0.22.0, =1.6.0, =4.1.3, =0.10.0.dev1, =0.11.0 - muffnn 2.3.1 - neoepiscope 0.4.0 and more...