Advisoriesby IbisMultiple `CHECK`-fails in `function.cc` in TensowFlow
Impact
A malicious user can cause a denial of service by altering a SavedModel such that [assertions in function.cc](https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/function.cc) would be falsified and crash the Python interpreter.
Patches
We have patched the issue in GitHub commits [dcc21c7bc972b10b6fb95c2fb0f4ab5a59680ec2](https://github.com/tensorflow/tensorflow/commit/dcc21c7bc972b10b6fb95c2fb0f4ab5a59680ec2) and [3d89911481ba6ebe8c88c1c0b595412121e6c645](https://github.com/tensorflow/tensorflow/commit/3d89911481ba6ebe8c88c1c0b595412121e6c645).
The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
For more information
Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| tensorflow PyPI | < 2.5.3 | 2.5.3 |
| >= 2.6.0, < 2.6.3 | 2.6.3 | |
| >= 2.7.0, < 2.7.1 | 2.7.1 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-617
- Also known as
- BIT-tensorflow-2022-23586, CVE-2022-23586, PYSEC-2022-150, PYSEC-2022-95, PYSEC-2026-3096
- github.com/tensorflow/tensorflow/security/advisories/GHSA-43jf-985q-588j
- nvd.nist.gov/vuln/detail/CVE-2022-23586
- github.com/tensorflow/tensorflow/commit/3d89911481ba6ebe8c88c1c0b595412121e6c645
- github.com/tensorflow/tensorflow/commit/dcc21c7bc972b10b6fb95c2fb0f4ab5a59680ec2
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-95.yaml
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-150.yaml
- github.com/tensorflow/tensorflow
- github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/function.cc
More TensorFlow advisories
All TensorFlow
Use after free in `DecodePng` kernelCVE-2022-23584fixed in 2.5.3 +2Out of bounds write in TensorflowCVE-2022-23566fixed in 2.5.3 +2Reachable Assertion in TensorflowCVE-2022-23564fixed in 2.5.3 +2Insecure temporary file in TensorflowCVE-2022-23563fixed in 2.5.3 +2Integer overflow in TensorflowCVE-2022-23562fixed in 2.5.3 +2Out of bounds write in TFLiteCVE-2022-23561fixed in 2.5.3 +2