CVE-2022-29210

Description

TensorFlow is an open source platform for machine learning. In version 2.8.0, the TensorKey hash function used total estimated AllocatedBytes(), which (a) is an estimate per tensor, and (b) is a very poor hash function for constants (e.g. int32_t). It also tried to access individual tensor bytes through tensor.data() of size AllocatedBytes(). This led to ASAN failures because the AllocatedBytes() is an estimate of total bytes allocated by a tensor, including any pointed-to constructs (e.g. strings), and does not refer to contiguous bytes in the .data() buffer. The discoverers could not use this byte vector anyway because types such as tstring include pointers, whereas they needed to hash the string values themselves. This issue is patched in Tensorflow versions 2.9.0 and 2.8.1.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.039

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities are fixed in Python-tensorflow 2.8.1	Windows
Multiple vulnerabilities are fixed in Python-tensorflow-cpu 2.8.1	Windows
Multiple vulnerabilities are fixed in Python-tensorflow-gpu 2.8.1	Windows
Multiple vulnerabilities are fixed in Python-tensorflow for linux 2.8.1	Linux
Multiple vulnerabilities are fixed in Python-tensorflow-cpu for linux 2.8.1	Linux
Multiple vulnerabilities are fixed in Python-tensorflow-gpu for linux 2.8.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234