CVE-2022-23590
published 2022-02-04CVE-2022-23590: Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process…
PriorityP335high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.97%
58.1th percentile
Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process to crash due to encountering a `StatusOr` value that is an error and forcibly extracting the value from it. We have patched the issue in multiple GitHub commits and these will be included in TensorFlow 2.8.0 and TensorFlow 2.7.1, as both are affected.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | tensorflow | — | — |
| tensorflow | < 2.7.1 | 2.7.1 | |
| intel | optimization_for_tensorflow | >= 0 < 2.7.1 | 2.7.1 |
| tensorflow | tensorflow | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_debian5.9LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2022-23590: tensorflow - Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a Ten...
vendor_debian·2022·CVSS 5.9
CVE-2022-23590 [MEDIUM] CVE-2022-23590: tensorflow - Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a Ten...
Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process to crash due to encountering a `StatusOr` value that is an error and forcibly extracting the value from it. We have patched the issue in multiple GitHub commits and these will be included in TensorFlow 2.8.0 and TensorFlow 2.7.1, as both are affected.
Scope: local
forky: resolved
sid: resolved
GHSA
Crash due to erroneous `StatusOr` in TensorFlow
ghsa·2022-02-09
CVE-2022-23590 [MEDIUM] CWE-754 Crash due to erroneous `StatusOr` in TensorFlow
Crash due to erroneous `StatusOr` in TensorFlow
### Impact
A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process to crash due to encountering [a `StatusOr` value that is an error and forcibly extracting the value from it](https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L560-L567):
```cc
if (op_reg_data->type_ctor != nullptr) {
VLOG(3) op_def);
const FullTypeDef ctor_typedef = ctor_type.ValueOrDie();
if (ctor_typedef.type_id() != TFT_UNSET) {
*(node_def.mutable_experimental_type()) = ctor_typedef;
}
}
```
If `ctor_type` is an error status, `ValueOrDie` results in a crash.
### Patches
We have patched the issue in GitHub commit [955059813cc325dc1db5e2daa6221271406d4439](htt
OSV
Crash due to erroneous `StatusOr` in TensorFlow
osv·2022-02-09
CVE-2022-23590 [MEDIUM] Crash due to erroneous `StatusOr` in TensorFlow
Crash due to erroneous `StatusOr` in TensorFlow
### Impact
A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process to crash due to encountering [a `StatusOr` value that is an error and forcibly extracting the value from it](https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L560-L567):
```cc
if (op_reg_data->type_ctor != nullptr) {
VLOG(3) op_def);
const FullTypeDef ctor_typedef = ctor_type.ValueOrDie();
if (ctor_typedef.type_id() != TFT_UNSET) {
*(node_def.mutable_experimental_type()) = ctor_typedef;
}
}
```
If `ctor_type` is an error status, `ValueOrDie` results in a crash.
### Patches
We have patched the issue in GitHub commit [955059813cc325dc1db5e2daa6221271406d4439](htt
OSV
CVE-2022-23590: Tensorflow is an Open Source Machine Learning Framework
osv·2022-02-04
CVE-2022-23590 CVE-2022-23590: Tensorflow is an Open Source Machine Learning Framework
Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process to crash due to encountering a `StatusOr` value that is an error and forcibly extracting the value from it. We have patched the issue in multiple GitHub commits and these will be included in TensorFlow 2.8.0 and TensorFlow 2.7.1, as both are affected.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L560-L567https://github.com/tensorflow/tensorflow/commit/955059813cc325dc1db5e2daa6221271406d4439https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pqrv-8r2f-7278https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L560-L567https://github.com/tensorflow/tensorflow/commit/955059813cc325dc1db5e2daa6221271406d4439https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pqrv-8r2f-7278
2022-02-04
Published