CVE-2021-29611

Name

CVE-2021-29611

Description

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in `SparseReshape` results in a denial of service based on a `CHECK`-failure. The implementation(https://github.com/tensorflow/tensorflow/blob/e87b51ce05c3eb172065a6ea5f48415854223285/tensorflow/core/kernels/sparse_reshape_op.cc#L40) has no validation that the input arguments specify a valid sparse tensor. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2 and TensorFlow 2.3.3, as these are the only affected versions.

NVD Severity

medium

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
CONFIRM	https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9rpc-5v9q-5r7f
MISC	https://github.com/tensorflow/tensorflow/commit/1d04d7d93f4ed3854abf75d6b712d72c3f70d6b6

CPE URI	Source package	Min version	Max version
`cpe:2.3:a:google:tensorflow::::::::`	tensorflow	>= None	< 2.1.4
`cpe:2.3:a:google:tensorflow::::::::`	tensorflow	>= 2.2.0	< 2.2.3
`cpe:2.3:a:google:tensorflow::::::::`	tensorflow	>= 2.3.0	< 2.3.3
`cpe:2.3:a:google:tensorflow::::::::`	tensorflow	>= 2.4.0	< 2.4.2

References

Match rules

Vulnerable and fixed packages