CVE-2021-37650— Google TensorFlow缓冲区错误漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2021-37650の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` in TensorFlow
ソース: NVD (National Vulnerability Database)
脆弱性説明
TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.ExperimentalDatasetToTFRecord` and `tf.raw_ops.DatasetToTFRecord` can trigger heap buffer overflow and segmentation fault. The [implementation](https://github.com/tensorflow/tensorflow/blob/f24faa153ad31a4b51578f8181d3aaab77a1ddeb/tensorflow/core/kernels/data/experimental/to_tf_record_op.cc#L93-L102) assumes that all records in the dataset are of string type. However, there is no check for that, and the example given above uses numeric types. We have patched the issue in GitHub commit e0b6e58c328059829c3eb968136f17aa72b6c876. The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Google TensorFlow缓冲区错误漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Google TensorFlow是美国谷歌（Google）公司的一套用于机器学习的端到端开源平台。 Google TensorFlow 存在缓冲区错误漏洞，该漏洞源于程序的"tf.raw_ops.ExperimentalDatasetToTFRecord"和"tf.raw_ops.DatasetToTFRecord"的实现可以触发堆缓冲区溢出和分段错误。以下产品及版本收到影响：TensorFlow 2.5.1、TensorFlow 2.4.3 和 TensorFlow 2.3.4。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| tensorflow | tensorflow | >= 2.5.0, < 2.5.1 | - |
II. CVE-2021-37650の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2021-37650のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · tensorflow · 2021-08-12 · 58 CVEs total
| CVE-2021-37678 | 9.3 CRITICAL | Arbitrary code execution due to YAML deserialization |
| CVE-2021-37639 | 8.4 HIGH | Null pointer dereference and heap OOB read in TensorFlow |
| CVE-2021-37681 | 7.8 HIGH | Null pointer exception in TensorFlow Lite |
| CVE-2021-37665 | 7.8 HIGH | Incomplete validation in MKL requantization in TensorFlow |
| CVE-2021-37663 | 7.8 HIGH | Incomplete validation in `QuantizeV2` in TensorFlow |
| CVE-2021-37667 | 7.8 HIGH | Reference binding to nullptr in unicode encoding in TensorFlow |
| CVE-2021-37689 | 7.8 HIGH | Null pointer dereference in TensorFlow Lite MLIR optimizations |
| CVE-2021-37688 | 7.8 HIGH | Null pointer dereference in TensorFlow Lite |
| CVE-2021-37676 | 7.8 HIGH | Reference binding to nullptr in shape inference in TensorFlow |
| CVE-2021-37671 | 7.8 HIGH | Reference binding to nullptr in map operations in TensorFlow |
| CVE-2021-37666 | 7.8 HIGH | Reference binding to nullptr in `RaggedTensorToVariant` in TensorFlow |
| CVE-2021-37648 | 7.8 HIGH | Incorrect validation of `SaveV2` inputs in TensorFlow |
| CVE-2021-37652 | 7.8 HIGH | Use after free in boosted trees creation in TensorFlow |
| CVE-2021-37643 | 7.7 HIGH | Null pointer dereference in `MatrixDiagPartOp` in TensorFlow |
| CVE-2021-37638 | 7.7 HIGH | Null pointer dereference in `RaggedTensorToTensor` in TensorFlow |
| CVE-2021-37647 | 7.7 HIGH | Null pointer dereference in `SparseTensorSliceDataset` in TensorFlow |
| CVE-2021-37637 | 7.7 HIGH | Null pointer dereference in `CompressElement` in TensorFlow |
| CVE-2021-37649 | 7.7 HIGH | Null pointer dereference in `UncompressElement` in TensorFlow |
| CVE-2021-37664 | 7.3 HIGH | Heap OOB in boosted trees in TensorFlow |
| CVE-2021-37659 | 7.3 HIGH | Out of bounds read via null pointer dereference in TensorFlow |
Showing 20 of 58 CVEs. View all on vendor page →
IV. 関連脆弱性
同じベンダー: tensorflow
- CVE-2026-2492
TensorFlow HDF5 Library Uncontrolled Search Path Element Loc - CVE-2023-33976
TensorFlow segfault in array_ops.upper_bound - CVE-2024-3660
Arbitrary code injection vulnerability in Keras framework < - CVE-2023-25661
Denial of Service in TensorFlow - CVE-2023-25660
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
同じ弱点: CWE-120
- CVE-2026-8260
D-Link DCS-935L HNAP Service hnap_service SetDeviceSettings - CVE-2026-8137
Totolink X5000R formDdns sub_458E40 buffer overflow - CVE-2026-6691
MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow - CVE-2026-7857
D-Link DI-8100 CGI user_group.asp sprintf buffer overflow - CVE-2026-7856
D-Link DI-8100 Web Management url_member.asp buffer overflow
V. CVE-2021-37650へのコメント
まだコメントはありません