CVE-2022-23582Reachable Assertion in Tensorflow

Severity
6.5MEDIUMNVD
EPSS
0.2%
top 55.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 4
Latest updateFeb 10

Description

Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that `TensorByteSize` would trigger `CHECK` failures. `TensorShape` constructor throws a `CHECK`-fail if shape is partial or has a number of elements that would overflow the size of an `int`. The `PartialTensorShape` constructor instead does not cause a `CHECK`-abort if the shape is partial, which is exactly what this function needs to be able to return `-1`. Th

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

CVEListV5tensorflow/tensorflow< 2.5.3+2
PyPIintel/optimization_for_tensorflow2.6.02.6.3+2
NVDgoogle/tensorflow2.6.02.6.2+2

Patches

🔴Vulnerability Details

4
GHSA
`CHECK`-failures in `TensorByteSize` in Tensorflow2022-02-10
OSV
`CHECK`-failures in `TensorByteSize` in Tensorflow2022-02-10
CVEList
`CHECK`-failures in `TensorByteSize` in Tensorflow2022-02-04
OSV
CVE-2022-23582: Tensorflow is an Open Source Machine Learning Framework2022-02-04

📋Vendor Advisories

1
Debian
CVE-2022-23582: tensorflow - Tensorflow is an Open Source Machine Learning Framework. A malicious user can ca...2022
CVE-2022-23582 — Reachable Assertion in Tensorflow | cvebase