CVE-2022-29211— Google TensorFlow输入验证错误漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2022-29211の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Segfault in TensorFlow if `tf.histogram_fixed_width` is called with NaN values
ソース: NVD (National Vulnerability Database)
脆弱性説明
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.histogram_fixed_width` is vulnerable to a crash when the values array contain `Not a Number` (`NaN`) elements. The implementation assumes that all floating point operations are defined and then converts a floating point result to an integer index. If `values` contains `NaN` then the result of the division is still `NaN` and the cast to `int32` would result in a crash. This only occurs on the CPU implementation. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
输入验证不恰当
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Google TensorFlow输入验证错误漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Google TensorFlow是美国谷歌（Google）公司的一套用于机器学习的端到端开源平台。 Google TensorFlow 2.9.0之前版本、2.8.1之前版本、2.7.2之前版本和2.6.4之前版本存在输入验证错误漏洞，该漏洞源于tf.histogram_fixed_width值出现非数字元素时应用会发生崩溃。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| tensorflow | tensorflow | < 2.6.4 | - |
II. CVE-2022-29211の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2022-29211のインテリジェンス情報
请登录查看更多情报信息。
- https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2x_refsource_MISC
- https://github.com/tensorflow/tensorflow/issues/45770x_refsource_MISC
- https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1x_refsource_MISC
- https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4x_refsource_MISC
- https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-29211
Same Patch Batch · tensorflow · 2022-05-20 · 24 CVEs total
| CVE-2022-29216 | 7.8 HIGH | Code injection in `saved_model_cli` in TensorFlow |
| CVE-2022-29208 | 7.1 HIGH | Segfault and Out-of-bounds Write write due to incomplete validation in TensorFlow |
| CVE-2022-29206 | 5.5 MEDIUM | Missing validation results in undefined behavior in `SparseTensorDenseAdd` in TensorFlow |
| CVE-2022-29213 | 5.5 MEDIUM | Incomplete validation in signal ops leads to crashes in TensorFlow |
| CVE-2022-29210 | 5.5 MEDIUM | Heap buffer overflow due to incorrect hash function in TensorFlow |
| CVE-2022-29209 | 5.5 MEDIUM | Type confusion leading to `CHECK`-failure based denial of service in TensorFlow |
| CVE-2022-29212 | 5.5 MEDIUM | Core dump when loading TFLite models with quantization in TensorFlow |
| CVE-2022-29201 | 5.5 MEDIUM | Missing validation in `QuantizedConv2D` results in undefined behavior in TensorFlow |
| CVE-2022-29202 | 5.5 MEDIUM | Denial of service in TensorFlow due to lack of validation in `tf.ragged.constant` |
| CVE-2022-29203 | 5.5 MEDIUM | Integer overflow in `SpaceToBatchND` in TensorFlow |
| CVE-2022-29204 | 5.5 MEDIUM | Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2` |
| CVE-2022-29205 | 5.5 MEDIUM | Segfault due to missing support for quantized types in TensorFlow |
| CVE-2022-29192 | 5.5 MEDIUM | Missing validation crashes `QuantizeAndDequantizeV4Grad` in TensorFlow |
| CVE-2022-29207 | 5.5 MEDIUM | Undefined behavior when users supply invalid resource handles in TensorFlow |
| CVE-2022-29195 | 5.5 MEDIUM | Missing validation causes denial of service in TensorFlow via `StagePeek` |
| CVE-2022-29197 | 5.5 MEDIUM | Missing validation causes denial of service in TensorFlow via `UnsortedSegmentJoin` |
| CVE-2022-29196 | 5.5 MEDIUM | Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2` |
| CVE-2022-29198 | 5.5 MEDIUM | Missing validation causes denial of service in TensorFlow via `SparseTensorToCSRSparseMatr |
| CVE-2022-29199 | 5.5 MEDIUM | Missing validation causes denial of service in TensorFlow via `LoadAndRemapMatrix` |
| CVE-2022-29200 | 5.5 MEDIUM | Missing validation causes denial of service in TensorFlow via `LSTMBlockCell` |
Showing 20 of 24 CVEs. View all on vendor page →
IV. 関連脆弱性
同じベンダー: tensorflow
- CVE-2026-2492
TensorFlow HDF5 Library Uncontrolled Search Path Element Loc - CVE-2023-33976
TensorFlow segfault in array_ops.upper_bound - CVE-2024-3660
Arbitrary code injection vulnerability in Keras framework < - CVE-2023-25661
Denial of Service in TensorFlow - CVE-2023-25660
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
V. CVE-2022-29211へのコメント
まだコメントはありません