id: PYSEC-2022-132
details: Tensorflow is an Open Source Machine Learning Framework. The implementation
  of `AddManySparseToTensorsMap` is vulnerable to an integer overflow which results
  in a `CHECK`-fail when building new `TensorShape` objects (so, an assert failure
  based denial of service). We are missing some validation on the shapes of the input
  tensors as well as directly constructing a large `TensorShape` with user-provided
  dimensions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick
  this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these
  are also affected and still in supported range.
affected:
- package:
    name: tensorflow-gpu
    ecosystem: PyPI
    purl: pkg:pypi/tensorflow-gpu
  ranges:
  - type: GIT
    repo: https://github.com/tensorflow/tensorflow
    events:
    - introduced: "0"
    - fixed: b51b82fe65ebace4475e3c54eb089c18a4403f1c
    - fixed: a68f68061e263a88321c104a6c911fe5598050a8
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 2.5.3
    - introduced: 2.6.0
    - fixed: 2.6.3
  versions:
  - 0.12.0
  - 0.12.1
  - 1.0.0
  - 1.0.1
  - 1.1.0
  - 1.10.0
  - 1.10.1
  - 1.11.0
  - 1.12.0
  - 1.12.2
  - 1.12.3
  - 1.13.1
  - 1.13.2
  - 1.14.0
  - 1.15.0
  - 1.15.2
  - 1.15.3
  - 1.15.4
  - 1.15.5
  - 1.2.0
  - 1.2.1
  - 1.3.0
  - 1.4.0
  - 1.4.1
  - 1.5.0
  - 1.5.1
  - 1.6.0
  - 1.7.0
  - 1.7.1
  - 1.8.0
  - 1.9.0
  - 2.0.0
  - 2.0.1
  - 2.0.2
  - 2.0.3
  - 2.0.4
  - 2.1.0
  - 2.1.1
  - 2.1.2
  - 2.1.3
  - 2.1.4
  - 2.2.0
  - 2.2.1
  - 2.2.2
  - 2.2.3
  - 2.3.0
  - 2.3.1
  - 2.3.2
  - 2.3.3
  - 2.3.4
  - 2.4.0
  - 2.4.1
  - 2.4.2
  - 2.4.3
  - 2.4.4
  - 2.5.0
  - 2.5.1
  - 2.5.2
  - 2.6.0
  - 2.6.1
  - 2.6.2
references:
- type: WEB
  url: https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/sparse_tensors_map_ops.cc
- type: ADVISORY
  url: https://github.com/tensorflow/tensorflow/security/advisories/GHSA-6445-fm66-fvq2
- type: FIX
  url: https://github.com/tensorflow/tensorflow/commit/b51b82fe65ebace4475e3c54eb089c18a4403f1c
- type: FIX
  url: https://github.com/tensorflow/tensorflow/commit/a68f68061e263a88321c104a6c911fe5598050a8
aliases:
- CVE-2022-23568
- GHSA-6445-fm66-fvq2
modified: "2022-03-09T00:18:26.728990Z"
published: "2022-02-03T12:15:00Z"