Advisoriesby IbisTensorFlowGHSA-gjh7-xx4r-x345
TensorFlow has segfault in array_ops.upper_bound
Fix: upgrade to 2.12.1 or later
Impact
array_ops.upper_bound causes a segfault when not given a rank 2 tensor.
Patches
We have patched the issue in GitHub commit [915884fdf5df34aaedd00fc6ace33a2cfdefa586](https://github.com/tensorflow/tensorflow/commit/915884fdf5df34aaedd00fc6ace33a2cfdefa586).
The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1.
For more information
Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.
Attribution
This vulnerability has been reported by dmc1778
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| tensorflow PyPI | < 2.12.1 | 2.12.1 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-190
- Also known as
- BIT-tensorflow-2023-33976, CVE-2023-33976, PYSEC-2026-1962, PYSEC-2026-3190, PYSEC-2026-3331
- github.com/tensorflow/tensorflow/security/advisories/GHSA-gjh7-xx4r-x345
- nvd.nist.gov/vuln/detail/CVE-2023-33976
- github.com/tensorflow/tensorflow/commit/6fa05df43b00038b048f4f0e51ef522da6532fec
- github.com/tensorflow/tensorflow/commit/915884fdf5df34aaedd00fc6ace33a2cfdefa586
- github.com/tensorflow/tensorflow
More TensorFlow advisories
All TensorFlow
TensorFlow Denial of Service vulnerabilityCVE-2023-25661fixed in 2.11.1TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitchCVE-2023-25659fixed in 2.11.1TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`CVE-2023-25660fixed in 2.11.1TensorFlow vulnerable to integer overflow in EditDistanceCVE-2023-25662fixed in 2.11.1TensorFlow has Null Pointer Error in TensorArrayConcatV2CVE-2023-25663fixed in 2.11.1TensorFlow has Heap-buffer-overflow in AvgPoolGradCVE-2023-25664fixed in 2.11.1