id: PYSEC-2021-509
details: TensorFlow is an end-to-end open source platform for machine learning. Due
  to lack of validation in `tf.raw_ops.CTCBeamSearchDecoder`, an attacker can trigger
  denial of service via segmentation faults. The implementation(https://github.com/tensorflow/tensorflow/blob/a74768f8e4efbda4def9f16ee7e13cf3922ac5f7/tensorflow/core/kernels/ctc_decoder_ops.cc#L68-L79)
  fails to detect cases when the input tensor is empty and proceeds to read data from
  a null buffer. The fix will be included in TensorFlow 2.5.0. We will also cherrypick
  this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow
  2.1.4, as these are also affected and still in supported range.
affected:
- package:
    name: tensorflow-cpu
    ecosystem: PyPI
    purl: pkg:pypi/tensorflow-cpu
  ranges:
  - type: GIT
    repo: https://github.com/tensorflow/tensorflow
    events:
    - introduced: "0"
    - fixed: b1b323042264740c398140da32e93fb9c2c9f33e
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 2.1.4
    - introduced: 2.2.0
    - fixed: 2.2.3
    - introduced: 2.3.0
    - fixed: 2.3.3
    - introduced: 2.4.0
    - fixed: 2.4.2
  versions:
  - 1.15.0
  - 2.1.0
  - 2.1.1
  - 2.1.2
  - 2.1.3
  - 2.2.0
  - 2.2.1
  - 2.2.2
  - 2.3.0
  - 2.3.1
  - 2.3.2
  - 2.4.0
  - 2.4.1
references:
- type: ADVISORY
  url: https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vq2r-5xvm-3hc3
- type: FIX
  url: https://github.com/tensorflow/tensorflow/commit/b1b323042264740c398140da32e93fb9c2c9f33e
aliases:
- CVE-2021-29581
- GHSA-vq2r-5xvm-3hc3
modified: "2021-12-09T06:34:55.926686Z"
published: "2021-05-14T20:15:00Z"