Incorrect Calculation of Buffer Size in TensorFlow - CVE-2022-41887

Vulnerability identifier: #VU86630

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-41887

CWE-ID: CWE-131

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to `tf.keras.losses.poisson` receives a `y_pred` and `y_true` that are passed through `functor::mul` in `BinaryOp`. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.

TensorFlow
IBM Watson Assistant for IBM Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Maximo Application Suite
IBM Watson Machine Learning Accelerator
Robotic Process Automation for Cloud Pak

Install updates from vendor's website.

TensorFlow - addressed in versions 2.9.3, 2.10.1, 2.11.0
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.0
IBM Watson Machine Learning Accelerator - update to 4.0
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.6.2
IBM Maximo Application Suite - addressed in versions 8.9.6, 8.10.3
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.1, 23.0.1

• https://github.com/tensorflow/tensorflow/commit/c5b30379ba87cbe774b08ac50c1f6d36df4ebb7c
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8fvv-46hw-vpg3
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/python/keras/losses.py
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/cwise_ops_common.h

• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in IBM Watson Machine Learning Accelerator on Cloud Pak for Data
• Multiple vulnerabilities in IBM Maximo Application Suite
• Multiple vulnerabilities in IBM Watson Discovery Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Watson Assistant for IBM Cloud Pak for Data
• Multiple vulnerabilities in TensorFlow