Google TensorFlow up to 2.8.3/2.9.2/2.10.0 tf.raw_ops.TensorListResize assertion

Summaryinfo

A vulnerability was found in Google TensorFlow up to 2.8.3/2.9.2/2.10.0. It has been rated as problematic. Impacted is the function tf.raw_ops.TensorListResize. This manipulation of the argument size causes assertion. This vulnerability is registered as CVE-2022-41893. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Google TensorFlow up to 2.8.3/2.9.2/2.10.0 (Artificial Intelligence Software). It has been declared as problematic. Affected by this vulnerability is the function tf.raw_ops.TensorListResize. The manipulation of the argument size with an unknown input leads to a assertion vulnerability. The CWE definition for the vulnerability is CWE-617. The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary. As an impact it is known to affect availability. The summary by CVE is:

TensorFlow is an open source platform for machine learning. If `tf.raw_ops.TensorListResize` is given a nonscalar value for input `size`, it results `CHECK` fail which can be used to trigger a denial of service attack. We have patched the issue in GitHub commit 888e34b49009a4e734c27ab0c43b0b5102682c56. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.

The weakness was published 11/19/2022 as GHSA-67pf-62xr-q35m. It is possible to read the advisory at github.com. This vulnerability is known as CVE-2022-41893 since 09/30/2022. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit.

Upgrading to version 2.8.4, 2.9.3, 2.10.1 or 2.11 eliminates this vulnerability. Applying the patch 888e34b49009a4e734c27ab0c43b0b5102682c56 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• Google

Name

• TensorFlow

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4
• 2.5
• 2.6
• 2.7
• 2.8
• 2.8.0
• 2.8.1
• 2.8.2
• 2.8.3
• 2.9
• 2.9.0
• 2.9.1
• 2.9.2
• 2.10.0

License

• free

Website

• Vendor: https://www.google.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion