Vulnerability CVE-2022-23590 - CERT Civis.Net

Vulnerability Name:

CVE-2022-23590 (CCN-218903)

Assigned:

2022-02-02

Published:

2022-02-02

Updated:

2022-02-17

Summary:

Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process to crash due to encountering a `StatusOr` value that is an error and forcibly extracting the value from it. We have patched the issue in multiple GitHub commits and these will be included in TensorFlow 2.8.0 and TensorFlow 2.7.1, as both are affected.

CVSS v3 Severity:

7.5 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
6.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
5.9 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2022-23590

Source: XF
Type: UNKNOWN
tensorflow-cve202223590-dos(218903)

Source: MISC
Type: Exploit, Third Party Advisory
https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L560-L567

Source: MISC
Type: Patch, Third Party Advisory
https://github.com/tensorflow/tensorflow/commit/955059813cc325dc1db5e2daa6221271406d4439

Source: CCN
Type: TensorFlow GIT Repository
Crash due to erroneous StatusOr

Source: CONFIRM
Type: Patch, Third Party Advisory
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pqrv-8r2f-7278

Source: CCN
Type: IBM Security Bulletin 6564605 (Watson Discovery)
IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in TensorFlow

Source: CCN
Type: TensorFlow Web site
TensorFlow

Vulnerable Configuration:

Configuration 1:

cpe:/a:google:tensorflow:*:*:*:*:*:*:*:* (Version < 2.7.1)

Configuration CCN 1:

cpe:/a:google:tensorflow:1.3.0:-:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:1.3.1:*:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:1.4.0:-:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:1.4.1:*:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:1.5.0:-:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:1.5.1:*:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:1.6.0:-:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:1.1.0:-:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:1.2.0:-:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:1.2.1:*:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:1.0.1:*:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:1.0.0:-:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:1.12.0:-:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:2.0.0:-:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:1.15.3:*:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:2.0.2:*:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:2.1.1:*:*:*:-:*:*:*

OR cpe:/a:tensorflow:tensorflow:2.2.0:*:*:*:-:*:*:*

OR cpe:/a:tensorflow:tensorflow:2.3.0:*:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:2.1.0:-:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:2.4.0:-:*:*:-:*:*:*

OR cpe:/a:google:tensorflow:2.1.4:*:*:*:*:*:*:*

OR cpe:/a:google:tensorflow:2.2.3:*:*:*:*:*:*:*

OR cpe:/a:google:tensorflow:2.3.3:*:*:*:*:*:*:*

OR cpe:/a:google:tensorflow:2.4.2:*:*:*:*:*:*:*

OR cpe:/a:google:tensorflow:2.5.0:-:*:*:*:*:*:*

OR cpe:/a:google:tensorflow:2.6.0:-:*:*:*:*:*:*

OR cpe:/a:google:tensorflow:2.5.2:*:*:*:*:*:*:*

OR cpe:/a:google:tensorflow:2.6.2:*:*:*:*:*:*:*

OR cpe:/a:google:tensorflow:2.7.0:*:*:*:*:*:*:*

AND

cpe:/a:ibm:watson_discovery:2.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:watson_discovery:2.2.1:*:*:*:*:*:*:*

Denotes that component is vulnerable