TensorFlow vulnerable to `CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs`

高 7.5CVE-2022-36016 · BIT-tensorflow-2022-36016 · GHSA-g468-qj8g-vcjc · 16/09/2022 公開 · 17/06/2026 更新

要点

CVE-2022-36016 は tensorflow, tensorflow-cpu, tensorflow-gpu に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.70%（全脆弱性の 53.5% より高い）。
対処：2.8.1, 2.9.1, 2.7.2 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
tensorflow PyPI	`≥ 2.8.0, < 2.8.1≥ 2.9.0, < 2.9.1< 2.7.2`	`2.8.12.9.12.7.2`
tensorflow-cpu PyPI	`≥ 2.8.0, < 2.8.1≥ 2.9.0, < 2.9.1< 2.7.2`	`2.8.12.9.12.7.2`
tensorflow-gpu PyPI	`≥ 2.8.0, < 2.8.1≥ 2.9.0, < 2.9.1< 2.7.2`	`2.8.12.9.12.7.2`
tensorflow google	`= 2.10≥ 2.8.0, < 2.8.1≥ 2.9.0, < 2.9.1< 2.7.2`	`2.8.12.9.12.7.2`

概要

Impact

When tensorflow::full_type::SubstituteFromAttrs receives a FullTypeDef& t that is not exactly three args, it triggers a CHECK-fail instead of returning a status.

Status SubstituteForEach(AttrMap& attrs, FullTypeDef& t) {
  DCHECK_EQ(t.args_size(), 3);

  const auto& cont = t.args(0);
  const auto& tmpl = t.args(1);
  const auto& t_var = t.args(2);

Patches

We have patched the issue in GitHub commit 6104f0d4091c260ce9352f9155f7e9b725eab012. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

NVD の説明

TensorFlow is an open source platform for machine learning. When `tensorflow::full_type::SubstituteFromAttrs` receives a `FullTypeDef& t` that is not exactly three args, it triggers a `CHECK`-fail instead of returning a status. We have patched the issue in GitHub commit 6104f0d4091c260ce9352f9155f7e9b725eab012. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.

参考情報

tensorflow/tensorflow security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2022-36016 · ADVISORY
tensorflow/tensorflow commit 6104f0d · WEB
tensorflow/tensorflow · PACKAGE
tensorflow/tensorflow · WEB
tensorflow/tensorflow release v2.10.0 · WEB
pypi.org/project/tensorflow · PACKAGE
GitHub Advisory GHSA-g468-qj8g-vcjc · ADVISORY
pypi.org/project/tensorflow-cpu · PACKAGE
pypi.org/project/tensorflow-gpu · PACKAGE

tensorflow のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン

パッケージ

影響を受けるバージョン

修正済みバージョン

tensorflow

PyPI

≥ 2.8.0, < 2.8.1≥ 2.9.0, < 2.9.1< 2.7.2

2.8.12.9.12.7.2

tensorflow-cpu

PyPI

≥ 2.8.0, < 2.8.1≥ 2.9.0, < 2.9.1< 2.7.2

2.8.12.9.12.7.2

tensorflow-gpu

PyPI

≥ 2.8.0, < 2.8.1≥ 2.9.0, < 2.9.1< 2.7.2

2.8.12.9.12.7.2

tensorflow

google

= 2.10≥ 2.8.0, < 2.8.1≥ 2.9.0, < 2.9.1< 2.7.2

2.8.12.9.12.7.2

概要

Impact

When tensorflow::full_type::SubstituteFromAttrs receives a FullTypeDef& t that is not exactly three args, it triggers a CHECK-fail instead of returning a status.

Status SubstituteForEach(AttrMap& attrs, FullTypeDef& t) {
  DCHECK_EQ(t.args_size(), 3);

  const auto& cont = t.args(0);
  const auto& tmpl = t.args(1);
  const auto& t_var = t.args(2);

Patches

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

NVD の説明

tensorflow のその他の脆弱性

すべて見る →