Segfault via invalid attributes in `pywrap_tfe_src.cc` in Tensorflow
Published Nov 18, 2022
7.5
HIGHCVSS 3.1
EPSS 0.43%
Description
TensorFlow is an open source platform for machine learning. If a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tensor and returns a `nullptr`, which is not caught. An example can be seen in `tf.compat.v1.extract_volume_patches` by passing in quantized tensors as input `ksizes`. We have patched the issue in GitHub commit e9e95553e5411834d215e6770c81a83a3d0866ce. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.
Affected products
-
- Version < 2.8.4StatusaffectedConstraints-
- Version >= 2.10.0, < 2.10.1StatusaffectedConstraints-
- Version >= 2.9.0, < 2.9.3StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| TensorFlow | TensorFlow | n/a |
|
- < 2.8.4
- ≥ 2.9.0 · < 2.9.3
- ≥ 2.10.0 · < 2.10.1
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (5)
- https://github.com/advisories/GHSA-xxcj-rhqg-m46g Advisory
- https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/generate_box_proposals_op.cu.cc x_refsource_MISCThird Party Advisory
- https://github.com/tensorflow/tensorflow/commit/e9e95553e5411834d215e6770c81a83a3d0866ce x_refsource_MISCPatchThird Party Advisory
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xxcj-rhqg-m46g x_refsource_CONFIRMExploitPatchThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-41889
| Link | Providers | Tags |
|---|---|---|
| https://github.com/advisories/GHSA-xxcj-rhqg-m46g | Advisory | |
| https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/generate_box_proposals_op.cu.cc | x_refsource_MISCThird Party Advisory | |
| https://github.com/tensorflow/tensorflow/commit/e9e95553e5411834d215e6770c81a83a3d0866ce | x_refsource_MISCPatchThird Party Advisory | |
| https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xxcj-rhqg-m46g | x_refsource_CONFIRMExploitPatchThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2022-41889 |
Change history (0)
No recorded changes yet.