Reachable Assertion in TensorFlow - CVE-2022-35941
Published: November 25, 2022
Vulnerability identifier: #VU69614
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-35941
CWE-ID: CWE-617
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a reachable assertion within the AvgPoolOp function. A remote attacker can pass a negative value for the ksize argument to the affected function and crash the application.
Affected software
TensorFlow
IBM Cloud Pak for Watson AIOps
IBM Cloud Pak for Watson AIOps
How to mitigate CVE-2022-35941
Install updates from vendor's website.
TensorFlow - addressed in versions 2.7.4, 2.8.3, 2.9.2
IBM Cloud Pak for Watson AIOps - update to 3.5.1
IBM Cloud Pak for Watson AIOps - update to 3.5.1
External References
- https://github.com/tensorflow/tensorflow/commit/3a6ac52664c6c095aa2b114e742b0aa17fdce78f
- https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/avgpooling_op.cc#L56-L98
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mgmh-g2v6-mqw5