Vulnerability · Published Nov 5, 2021 · Assigned by GitHub_M
CVE-2021-41203Missing validation during checkpoint loading
High 7.8
In plain English
A high-severity insufficient verification of data authenticity in tensorflow from tensorflow. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behavior, integer overflows, segfaults and `CHECK`-fail crashes if they can change saved checkpoints from outside of TensorFlow. This is because the checkpoints loading infrastructure is missing validation for invalid file formats. The fixes will be included in TensorFlow 2.7.0. We will also cherrypick these commits on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | tensorflow | 2.4.4, 2.5.2, 2.6.1, 2.7.0 | PYSEC-2021-396 |
| PyPI | tensorflow | 2.6.1 | GHSA-7pxj-m4jf-r6h2 |
| PyPI | tensorflow | 2.5.2 | GHSA-7pxj-m4jf-r6h2 |
| PyPI | tensorflow | 2.4.4 | GHSA-7pxj-m4jf-r6h2 |
| PyPI | tensorflow-cpu | 2.5.2 | GHSA-7pxj-m4jf-r6h2 |
| PyPI | tensorflow-cpu | 2.4.4, 2.5.2, 2.6.1, 2.7.0 | PYSEC-2021-613 |
| PyPI | tensorflow-cpu | 2.6.1 | GHSA-7pxj-m4jf-r6h2 |
| PyPI | tensorflow-cpu | 2.4.4 | GHSA-7pxj-m4jf-r6h2 |
| PyPI | tensorflow-gpu | 2.4.4, 2.5.2, 2.6.1, 2.7.0 | PYSEC-2021-811 |
| PyPI | tensorflow-gpu | 2.6.1 | GHSA-7pxj-m4jf-r6h2 |
| PyPI | tensorflow-gpu | 2.5.2 | GHSA-7pxj-m4jf-r6h2 |
| PyPI | tensorflow-gpu | 2.4.4 | GHSA-7pxj-m4jf-r6h2 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| tensorflow | tensorflow | >= 2.6.0, < 2.6.1>= 2.5.0, < 2.5.2< 2.4.4 |
Weakness: CWE-345 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7pxj-m4jf-r6h2 x_refsource_CONFIRM
- https://github.com/tensorflow/tensorflow/commit/368af875869a204b4ac552b9ddda59f6a46a56ec x_refsource_MISC
- https://github.com/tensorflow/tensorflow/commit/abcced051cb1bd8fb05046ac3b6023a7ebcc4578 x_refsource_MISC
- https://github.com/tensorflow/tensorflow/commit/b619c6f865715ca3b15ef1842b5b95edbaa710ad x_refsource_MISC
- https://github.com/tensorflow/tensorflow/commit/e8dc63704c88007ee4713076605c90188d66f3d2 x_refsource_MISC