exploitDog

GHSA-gcvh-66ff-4mwm

Опубликовано: 10 фев. 2022

Источник: github

Github: Прошло ревью

CVSS4: 7.1

CVSS3: 6.5

Описание

CHECK-failures in Tensorflow

Impact

The implementation of MapStage is vulnerable a CHECK-fail if the key tensor is not a scalar:

import tensorflow as tf import numpy as np tf.raw_ops.MapStage( key = tf.constant(value=[4], shape= (1,2), dtype=tf.int64), indices = np.array([[6]]), values = np.array([-60]), dtypes = [tf.int64], capacity=0, memory_limit=0, container='', shared_name='', name=None )

Patches

We have patched the issue in GitHub commit f57315566d7094f322b784947093406c2aea0d7d.

The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

Attribution

This vulnerability has been reported by Faysal Hossain Shezan from University of Virginia. ~

Ссылки

Пакеты

Наименование

tensorflow

pip

Затронутые версииВерсия исправления

< 2.5.3

2.5.3

Наименование

tensorflow

pip

Затронутые версииВерсия исправления

>= 2.6.0, < 2.6.3

2.6.3

Наименование

tensorflow

pip

Затронутые версииВерсия исправления

= 2.7.0

2.7.1

Наименование

tensorflow-cpu

pip

Затронутые версииВерсия исправления

< 2.5.3

2.5.3

Наименование

tensorflow-cpu

pip

Затронутые версииВерсия исправления

>= 2.6.0, < 2.6.3

2.6.3

Наименование

tensorflow-cpu

pip

Затронутые версииВерсия исправления

= 2.7.0

2.7.1

Наименование

tensorflow-gpu

pip

Затронутые версииВерсия исправления

< 2.5.3

2.5.3

Наименование

tensorflow-gpu

pip

Затронутые версииВерсия исправления

>= 2.6.0, < 2.6.3

2.6.3

Наименование

tensorflow-gpu

pip

Затронутые версииВерсия исправления

= 2.7.0

2.7.1

EPSS

Процентиль: 44%

0.0022

Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

CVE ID

Дефекты

CWE-617

CWE-843

Связанные уязвимости

CVE-2022-21734

CVSS3: 6.5

nvd

около 4 лет назад

Tensorflow is an Open Source Machine Learning Framework. The implementation of `MapStage` is vulnerable a `CHECK`-fail if the key tensor is not a scalar. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

CVE-2022-21734

CVSS3: 6.5

debian

около 4 лет назад

Tensorflow is an Open Source Machine Learning Framework. The implement ...

EPSS

Процентиль: 44%

0.0022

Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

CVE ID

Дефекты

CWE-617

CWE-843