CVE-2022-35992: `CHECK` fail in `TensorListFromTensor` in TensorFlow
TensorFlow is an open source platform for machine learning. When TensorListFromTensor receives an elementshape of a rank greater than one, it gives a CHECK fail that can trigger a denial of service attack. We have patched the issue in GitHub commit 3db59a042a38f4338aa207922fa2f476e000a6ee. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-35992?
CVE-2022-35992 has been identified as a vulnerability that can trigger denial of service attacks.
How do I fix CVE-2022-35992?
To fix CVE-2022-35992, upgrade to TensorFlow version 2.10.0 or newer.
What versions of TensorFlow are affected by CVE-2022-35992?
CVE-2022-35992 affects TensorFlow versions prior to 2.10.0, including 2.7.2, 2.8.0, 2.8.1, 2.9.0, and 2.9.1.
What issues does CVE-2022-35992 cause?
CVE-2022-35992 can cause a CHECK fail when `TensorListFromTensor` processes an `element_shape` with a rank greater than one.
Is there a patch available for CVE-2022-35992?
Yes, the issue has been patched in the TensorFlow GitHub repository.