CVE-2022-29191 : TensorFlow is an open source platform for machine learning. Prior to versions 2.

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.GetSessionTensor` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

Published 2022-05-20 21:15:10

Updated 2022-06-02 12:57:40

Source GitHub, Inc.

View at NVD, CVE.org

Vulnerability category: Input validationDenial of service

Products affected by CVE-2022-29191

Google » Tensorflow
Versions from including (>=) 2.8.0 and before (<) 2.8.1
cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*
Matching versions
Google » Tensorflow
Versions from including (>=) 2.7.0 and before (<) 2.7.2
cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*
Matching versions
Google » Tensorflow
Versions before (<) 2.6.4
cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*
Matching versions
Google » Tensorflow » Version: 2.9.0 Update RC1
cpe:2.3:a:google:tensorflow:2.9.0:rc1:*:*:*:*:*:*
Matching versions
Google » Tensorflow » Version: 2.9.0 Update RC0
cpe:2.3:a:google:tensorflow:2.9.0:rc0:*:*:*:*:*:*
Matching versions
Google » Tensorflow » Version: 2.9.0 Update RC2
cpe:2.3:a:google:tensorflow:2.9.0:rc2:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2022-29191

EPSS FAQ

0.15%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 32 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-29191

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	GitHub, Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2022-29191

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: security-advisories@github.com (Primary)

References for CVE-2022-29191

https://github.com/tensorflow/tensorflow/commit/48305e8ffe5246d67570b64096a96f8e315a7281

Fix tf.raw_ops.GetSessionTensor vulnerability with invalid handle. · tensorflow/tensorflow@48305e8 · GitHub
Patch;Third Party Advisory
https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4

Release TensorFlow 2.6.4 · tensorflow/tensorflow · GitHub
Release Notes;Third Party Advisory

CVEs referencing this url
https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/session_ops.cc#L94-L112

tensorflow/session_ops.cc at f3b9bf4c3c0597563b289c0512e98d4ce81f886e · tensorflow/tensorflow · GitHub
Exploit;Third Party Advisory
https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2

Release TensorFlow 2.7.2 · tensorflow/tensorflow · GitHub
Release Notes;Third Party Advisory

CVEs referencing this url
https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0

Release TensorFlow 2.9.0 · tensorflow/tensorflow · GitHub
Release Notes;Third Party Advisory

CVEs referencing this url
https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1

Release TensorFlow 2.8.1 · tensorflow/tensorflow · GitHub
Release Notes;Third Party Advisory

CVEs referencing this url
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fv25-wrff-wf86

Missing validation causes denial of service via `GetSessionTensor` · Advisory · tensorflow/tensorflow · GitHub
Exploit;Third Party Advisory

Jump to

Vulnerability Details : CVE-2022-29191

Products affected by CVE-2022-29191

Exploit prediction scoring system (EPSS) score for CVE-2022-29191

CVSS scores for CVE-2022-29191

CWE ids for CVE-2022-29191

References for CVE-2022-29191