CVE-2021-29615: Stack overflow in `ParseAttrValue` with nested tensors
Impact The implementation of ParseAttrValue can be tricked into stack overflow due to recursion by giving in a specially crafted input.
Patches We have patched the issue in GitHub commit e07e1c3d26492c06f078c7e5bf2d138043e199c1.
The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.
For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.
Other sources
TensorFlow is an end-to-end open source platform for machine learning. The implementation of ParseAttrValue(https://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/framework/attrvalueutil.cc#L397-L453) can be tricked into stack overflow due to recursion by giving in a specially crafted input. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29615?
CVE-2021-29615 is rated as high severity due to the potential for stack overflow through recursion.
How do I fix CVE-2021-29615?
To fix CVE-2021-29615, upgrade TensorFlow to version 2.4.2 or later.
Which versions of TensorFlow are affected by CVE-2021-29615?
CVE-2021-29615 affects TensorFlow versions earlier than 2.4.2 including versions 2.0.0 to 2.4.1.
What is the impact of CVE-2021-29615 on applications?
CVE-2021-29615 may allow attackers to exploit applications that improperly handle parsed attributes, leading to crashes.
How can I check if my TensorFlow installation is vulnerable to CVE-2021-29615?
You can check your TensorFlow version by running pip show tensorflow in your command line to see if it is before 2.4.2.