CVE-2021-29568: TensorFlow GPU - Null Pointer Dereference in tf.raw_ops.ParameterizedTruncatedNormal

Background

TensorFlow is an end-to-end open source platform for machine learning. It provides a comprehensive ecosystem of tools, libraries, and resources for developing and deploying machine learning models. TensorFlow GPU is a variant of TensorFlow that leverages GPU acceleration for faster computation. It is widely used in various industries and research domains for deep learning tasks.

Vulnerability Detail

The vulnerability (CVE-2021-29568) exists in the tf.raw_ops.ParameterizedTruncatedNormal function of TensorFlow GPU. An attacker can trigger undefined behavior by binding to a null pointer. The vulnerability arises due to the lack of input argument validation in the implementation of the function. Specifically, the implementation does not check the shape argument before accessing the first element of the shape_tensor.flat<T>() array. If the shape argument is empty, the array will be empty as well, leading to undefined behavior. The impact of this vulnerability can range from crashes and unexpected program behavior to potential remote code execution.

pip install --upgrade "tensorflow-gpu==2.12.0"

Workaround

As a temporary workaround, users can manually validate the shape argument before invoking the tf.raw_ops.ParameterizedTruncatedNormal function. By ensuring that the shape argument is not empty, the null pointer dereference can be avoided. Here's an example of how to perform the validation in Python:

import tensorflow as tf

def safe_parameterized_truncated_normal(shape, dtype=tf.float32, seed=None):
    if not shape:
        raise ValueError('Shape argument cannot be empty')
    return tf.raw_ops.ParameterizedTruncatedNormal(shape=shape, dtype=dtype, seed=seed)

By using this safe_parameterized_truncated_normal function instead of directly calling tf.raw_ops.ParameterizedTruncatedNormal, the vulnerability can be mitigated.

Conclusion

In conclusion, the vulnerability (CVE-2021-29568) in TensorFlow GPU's tf.raw_ops.ParameterizedTruncatedNormal function can lead to undefined behavior and potential security risks. It is crucial to update to the latest patched version of TensorFlow GPU or apply the provided workaround to mitigate the vulnerability. For further support on vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for tensorflow-gpu →

FAQ