Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-29211

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.histogram_fixed_width` is vulnerable to a crash when the values array contain `Not a Number` (`NaN`) elements. The implementation assumes that all floating point operations are defined and then converts a floating point result to an integer index. If `values` contains `NaN` then the result of the division is still `NaN` and the cast to `int32` would result in a crash. This only occurs on the CPU implementation. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

Published

2022-05-21T00:15:11.650

Last Modified

2024-11-21T06:58:43.623

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

3.9

Impact Score

2.9

Weaknesses

Type: Primary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	google	tensorflow	< 2.6.4	Yes
Application	google	tensorflow	< 2.7.2	Yes
Application	google	tensorflow	2.7.0	Yes
Application	google	tensorflow	2.7.0	Yes
Application	google	tensorflow	2.8.0	Yes
Application	google	tensorflow	2.8.0	Yes
Application	google	tensorflow	2.8.0	Yes
Application	google	tensorflow	2.9.0	Yes
Application	google	tensorflow	2.9.0	Yes

References

https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/histogram_op.cc Third Party Advisory ([email protected])
https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/histogram_op.cc#L35-L74 Third Party Advisory ([email protected])
https://github.com/tensorflow/tensorflow/commit/e57fd691c7b0fd00ea3bfe43444f30c1969748b5 Patch, Third Party Advisory ([email protected])
https://github.com/tensorflow/tensorflow/issues/45770 Exploit, Issue Tracking, Patch, Third Party Advisory ([email protected])
https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4 Release Notes, Third Party Advisory ([email protected])
https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2 Release Notes, Third Party Advisory ([email protected])
https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1 Release Notes, Third Party Advisory ([email protected])
https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0 Release Notes, Third Party Advisory ([email protected])
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xrp2-fhq4-4q3w Exploit, Patch, Third Party Advisory ([email protected])
https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/histogram_op.cc Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/histogram_op.cc#L35-L74 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/tensorflow/tensorflow/commit/e57fd691c7b0fd00ea3bfe43444f30c1969748b5 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/tensorflow/tensorflow/issues/45770 Exploit, Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4 Release Notes, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2 Release Notes, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1 Release Notes, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0 Release Notes, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xrp2-fhq4-4q3w Exploit, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)