What is GHSA-g468-qj8g-vcjc?

GHSA-g468-qj8g-vcjc is a security advisory published by GitHub Security Advisories with Low severity. TensorFlow vulnerable to `CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs`

Which CVE IDs does GHSA-g468-qj8g-vcjc cover?

GHSA-g468-qj8g-vcjc covers the following CVE IDs: CVE-2022-36016. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-g468-qj8g-vcjc?

GHSA-g468-qj8g-vcjc affects 9 products, including: pip/tensorflow:\u003c 2.7.2; pip/tensorflow:\u003e= 2.8.0, \u003c 2.8.1; pip/tensorflow:\u003e= 2.9.0, \u003c 2.9.1; pip/tensorflow-cpu:\u003c 2.7.2; pip/tensorflow-cpu:\u003e= 2.8.0, \u003c 2.8.1; and others — see the full list on the advisory page.

GHSA-g468-qj8g-vcjcLow

TensorFlow vulnerable to `CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs`

Vendor

GitHub Security Advisories

Published

September 16, 2022

Last Modified

January 28, 2023

🔗 CVE IDs covered (1)

CVE-2022-36016 →

📋 Description

Impact

When tensorflow::full_type::SubstituteFromAttrs receives a FullTypeDef& t that is not exactly three args, it triggers a CHECK-fail instead of returning a status.

Status SubstituteForEach(AttrMap& attrs, FullTypeDef& t) {
  DCHECK_EQ(t.args_size(), 3);

  const auto& cont = t.args(0);
  const auto& tmpl = t.args(1);
  const auto& t_var = t.args(2);

Patches

We have patched the issue in GitHub commit 6104f0d4091c260ce9352f9155f7e9b725eab012. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

🎯 Affected products9

pip/tensorflow:< 2.7.2
pip/tensorflow:>= 2.8.0, < 2.8.1
pip/tensorflow:>= 2.9.0, < 2.9.1
pip/tensorflow-cpu:< 2.7.2
pip/tensorflow-cpu:>= 2.8.0, < 2.8.1
pip/tensorflow-cpu:>= 2.9.0, < 2.9.1
pip/tensorflow-gpu:< 2.7.2
pip/tensorflow-gpu:>= 2.8.0, < 2.8.1
pip/tensorflow-gpu:>= 2.9.0, < 2.9.1