In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorFlow's `SavedModel` protocol buffer and altering the name of required keys results in segfaults and data corruption while loading the model. This can cause a denial of service in products using `tensorflow-serving` or other inference-as-a-service installments. Fixed were added in commits f760f88b4267d981e13f4b302c437ae800445968 and fcfef195637c6e365577829c4d67681695956e7d (both going into TensorFlow 2.2.0 and 2.3.0 but not yet backported to earlier versions). However, this was not enough, as #41097 reports a different failure mode. The issue is patched in commit adf095206f25471e864a8e63a0f1caef53a0e3a6, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.
CVSS Details
- CVSS 3.1 Base Score: 9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade tensorflow2_2_1_2-gnu-hpc-develUpgrade libtensorflow2Upgrade tensorflow2_2_1_2-gnu-openmpi2-hpc-develUpgrade libtensorflow_framework2-gnu-openmpi2-hpcUpgrade tensorflow2-gnu-hpcUpgrade tensorflow2_2_1_2-gnu-hpc-docUpgrade tensorflow2_2_1_2-gnu-openmpi2-hpcUpgrade tensorflow2_2_1_2-gnu-hpcUpgrade tensorflow2-liteUpgrade libtensorflow_framework2Upgrade libtensorflow_cc2-gnu-openmpi2-hpcUpgrade tensorflow2-gnu-openmpi2-hpcUpgrade libtensorflow_cc2-gnu-hpcUpgrade libtensorflow_framework2-gnu-hpcUpgrade tensorflow2-docUpgrade libtensorflow2-gnu-openmpi2-hpcUpgrade tensorflow2-lite-develUpgrade libtensorflow_cc2Upgrade libtensorflow2-gnu-hpcUpgrade tensorflow2Upgrade tensorflow2-develUpgrade tensorflow2_2_1_2-gnu-openmpi2-hpc-doc | May 30, 2021 | Sep 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub