CVE-2022-41893: `CHECK_EQ` fail in `tf.raw_ops.TensorListResize` in Tensorflow
TensorFlow is an open source platform for machine learning. If tf.rawops.TensorListResize is given a nonscalar value for input size, it results CHECK fail which can be used to trigger a denial of service attack. We have patched the issue in GitHub commit 888e34b49009a4e734c27ab0c43b0b5102682c56. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
TensorFlowto a version that resolves this vulnerability.Fixed in 2.11 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 888e34b49009a4e734c27ab0c43b0b5102682c56 - Upgrade
Upgrade
TensorFlowto a version that resolves this vulnerability.Fixed in 2.10.1 - Upgrade
Upgrade
TensorFlowto a version that resolves this vulnerability.Fixed in 2.9.3 - Upgrade
Upgrade
TensorFlowto a version that resolves this vulnerability.Fixed in 2.8.4
Event History
Frequently Asked Questions
What is the vulnerability ID of this TensorFlow issue?
The vulnerability ID of this TensorFlow issue is CVE-2022-41893.
What is the severity of CVE-2022-41893?
The severity of CVE-2022-41893 is high with a CVSS score of 7.5.
What is the affected software for CVE-2022-41893?
The affected software for CVE-2022-41893 is Google TensorFlow versions up to 2.8.4, 2.9.0 up to 2.9.3, and 2.10.0 up to 2.10.1.
How can CVE-2022-41893 be exploited?
CVE-2022-41893 can be exploited by providing a nonscalar value for input `size` in `tf.raw_ops.TensorListResize` which triggers a CHECK fail and can result in a denial of service attack.
Has CVE-2022-41893 been patched?
Yes, CVE-2022-41893 has been patched. Please refer to the GitHub commit 888e34b49009a4e734c27ab0c43b0b5102682c56 for the patch.