Google TensorFlow up to 2.8.3/2.9.2/2.10.0 BaseCandidateSamplerOp true_classes out-of-bounds

Summaryinfo

A vulnerability has been found in Google TensorFlow up to 2.8.3/2.9.2/2.10.0 and classified as problematic. This impacts the function BaseCandidateSamplerOp. This manipulation of the argument true_classes causes out-of-bounds. This vulnerability is tracked as CVE-2022-41880. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Google TensorFlow up to 2.8.3/2.9.2/2.10.0 (Artificial Intelligence Software). It has been declared as problematic. Affected by this vulnerability is the function BaseCandidateSamplerOp. The manipulation of the argument true_classes with an unknown input leads to a out-of-bounds vulnerability. The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

TensorFlow is an open source platform for machine learning. When the `BaseCandidateSamplerOp` function receives a value in `true_classes` larger than `range_max`, a heap oob read occurs. We have patched the issue in GitHub commit b389f5c944cadfdfe599b3f1e4026e036f30d2d4. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.

The weakness was disclosed 11/19/2022 as GHSA-8w5g-3wcv-9g2j. The advisory is shared at github.com. This vulnerability is known as CVE-2022-41880 since 09/30/2022. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available.

Upgrading to version 2.8.4, 2.9.3, 2.10.1 or 2.11 eliminates this vulnerability. Applying the patch b389f5c944cadfdfe599b3f1e4026e036f30d2d4 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• Google

Name

• TensorFlow

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4
• 2.5
• 2.6
• 2.7
• 2.8
• 2.8.0
• 2.8.1
• 2.8.2
• 2.8.3
• 2.9
• 2.9.0
• 2.9.1
• 2.9.2
• 2.10.0

License

• free

Website

• Vendor: https://www.google.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion