Vulnerability Description
TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap allocated data by sending specially crafted illegal arguments to `tf.raw_ops.SdcaOptimizerV2`. The [implementation](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/core/kernels/sdca_internal.cc#L320-L353) does not check that the length of `example_labels` is the same as the number of examples. We have patched the issue in GitHub commit a4e138660270e7599793fa438cd7b2fc2ce215a6. The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tensorflow | >= 2.3.0, < 2.3.4 |
Related Weaknesses (CWE)
References
- https://github.com/tensorflow/tensorflow/commit/a4e138660270e7599793fa438cd7b2fcPatchThird Party Advisory
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5hj3-vjjf-f5m7Third Party Advisory
- https://github.com/tensorflow/tensorflow/commit/a4e138660270e7599793fa438cd7b2fcPatchThird Party Advisory
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5hj3-vjjf-f5m7Third Party Advisory
FAQ
What is CVE-2021-37672?
CVE-2021-37672 is a vulnerability with a CVSS score of 5.5 (MEDIUM). TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap allocated data by sending specially crafted illegal argu...
How severe is CVE-2021-37672?
CVE-2021-37672 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-37672?
Check the references section above for vendor advisories and patch information. Affected products include: Google Tensorflow.