id: PYSEC-2021-480
details: TensorFlow is an end-to-end open source platform for machine learning. An
  attacker can cause a denial of service by controlling the values of `num_segments`
  tensor argument for `UnsortedSegmentJoin`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/a2a607db15c7cd01d754d37e5448d72a13491bdb/tensorflow/core/kernels/unsorted_segment_join_op.cc#L92-L93)
  assumes that the `num_segments` tensor is a valid scalar. Since the tensor is empty
  the `CHECK` involved in `.scalar<T>()()` that checks that the number of elements
  is exactly 1 will be invalidated and this would result in process termination. The
  fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on
  TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these
  are also affected and still in supported range.
affected:
- package:
    name: tensorflow-cpu
    ecosystem: PyPI
    purl: pkg:pypi/tensorflow-cpu
  ranges:
  - type: GIT
    repo: https://github.com/tensorflow/tensorflow
    events:
    - introduced: "0"
    - fixed: 704866eabe03a9aeda044ec91a8d0c83fc1ebdbe
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 2.2.0rc0
    - introduced: 2.2.0
    - fixed: 2.3.0rc0
    - introduced: 2.3.0
    - fixed: 2.3.4
    - introduced: 2.4.0
    - fixed: 2.4.3
  versions:
  - 1.15.0
  - 2.1.0
  - 2.1.1
  - 2.1.2
  - 2.1.3
  - 2.1.4
  - 2.2.0
  - 2.2.1
  - 2.2.2
  - 2.2.3
  - 2.3.0
  - 2.3.1
  - 2.3.2
  - 2.3.3
  - 2.4.0
  - 2.4.1
  - 2.4.2
references:
- type: ADVISORY
  url: https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jhq9-wm9m-cf89
- type: FIX
  url: https://github.com/tensorflow/tensorflow/commit/704866eabe03a9aeda044ec91a8d0c83fc1ebdbe
aliases:
- CVE-2021-29552
- GHSA-jhq9-wm9m-cf89
modified: "2021-12-09T06:34:51.420468Z"
published: "2021-05-14T20:15:00Z"