GHSA-rjx6-v474-2ch9: Segfault in `CompositeTensorVariantToComponents` in Tensorflow

Q: Which TensorFlow releases are identified as affected or scheduled to receive fixes?

The issue is fixed in TensorFlow 2.11. TensorFlow 2.10.1, 2.9.3, and 2.8.4 are identified as affected supported releases and were slated to receive cherry-picked fixes.

Q: What conditions are required to trigger the crash?

An attacker needs to supply an encoded input that is not a valid CompositeTensorVariant tensor to tf.raw_ops.CompositeTensorVariantToComponents. The published vector indicates network reachability, low privileges, and user interaction are required.

Q: What is the impact if exploitation succeeds?

The malformed input triggers a segmentation fault, resulting in a denial of service. The provided severity vector indicates no confidentiality or integrity impact.

Published Nov 18, 2022

Updated

TensorFlow is an open source platform for machine learning. An input encoded that is not a valid CompositeTensorVariant tensor will trigger a segfault in tf.rawops.CompositeTensorVariantToComponents. We have patched the issue in GitHub commits bf594d08d377dc6a3354d9fdb494b32d45f91971 and 660ce5a89eb6766834bdc303d2ab3902aef99d3d. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.

Affected Software

1 affected component

Google TensorFlow<2.8.4, <2.9.3, <2.10.1, <2.11

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade TensorFlow to a version that resolves this vulnerability.
Fixed in 2.11

Event History

Nov 18, 2022

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which TensorFlow releases are identified as affected or scheduled to receive fixes?

The issue is fixed in TensorFlow 2.11. TensorFlow 2.10.1, 2.9.3, and 2.8.4 are identified as affected supported releases and were slated to receive cherry-picked fixes.

What conditions are required to trigger the crash?

An attacker needs to supply an encoded input that is not a valid CompositeTensorVariant tensor to tf.raw_ops.CompositeTensorVariantToComponents. The published vector indicates network reachability, low privileges, and user interaction are required.

What is the impact if exploitation succeeds?

The malformed input triggers a segmentation fault, resulting in a denial of service. The provided severity vector indicates no confidentiality or integrity impact.

GHSA-rjx6-v474-2ch9: Segfault in `CompositeTensorVariantToComponents` in Tensorflow

Affected Software

Remediation

Event History

Frequently Asked Questions

Which TensorFlow releases are identified as affected or scheduled to receive fixes?

What conditions are required to trigger the crash?

What is the impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Which TensorFlow releases are identified as affected or scheduled to receive fixes?

What conditions are required to trigger the crash?

What is the impact if exploitation succeeds?