Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-41217 BIT-tensorflow-2021-41217EUVD-2021-0439GHSA-5crj-c72x-m7gqPYSEC-2021-409PYSEC-2021-626PYSEC-2021-824

Null pointer exception when `Exit` node is not preceded by `Enter` op

Published Nov 5, 2021 · Updated Aug 4, 2024 · Assigned by GitHub_M

Description

TensorFlow is an open source platform for machine learning. In affected versions the process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not. This occurs because the code assumes that the first node in the pairing (e.g., an `Enter` node) always exists when encountering the second node (e.g., an `Exit` node). When this is not the case, `parent` is `nullptr` so dereferencing it causes a crash. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.

Affected products

VendorProductAffectedFixed
tensorflow tensorflow >= 2.6.0, < 2.6.1, >= 2.5.0, < 2.5.2, < 2.4.4 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI tensorflow >= 2.6.0, < 2.6.1 2.6.1 GHSA-5crj-c72x-m7gq
PyPI tensorflow >= 2.5.0, < 2.5.2 2.5.2 GHSA-5crj-c72x-m7gq
PyPI tensorflow < 2.4.4 2.4.4 GHSA-5crj-c72x-m7gq
PyPI tensorflow < 2.4.4 · >= 2.5.0, < 2.5.2 · >= 2.6.0, < 2.6.1 · >= 2.7.0rc0, < 2.7.0 2.4.4, 2.5.2, 2.6.1, 2.7.0 PYSEC-2021-409
PyPI tensorflow-cpu >= 2.6.0, < 2.6.1 2.6.1 GHSA-5crj-c72x-m7gq
PyPI tensorflow-cpu >= 2.5.0, < 2.5.2 2.5.2 GHSA-5crj-c72x-m7gq
PyPI tensorflow-cpu < 2.4.4 2.4.4 GHSA-5crj-c72x-m7gq
PyPI tensorflow-cpu < 2.4.4 · >= 2.5.0, < 2.5.2 · >= 2.6.0, < 2.6.1 · >= 2.7.0rc0, < 2.7.0 2.4.4, 2.5.2, 2.6.1, 2.7.0 PYSEC-2021-626
PyPI tensorflow-gpu >= 2.6.0, < 2.6.1 2.6.1 GHSA-5crj-c72x-m7gq
PyPI tensorflow-gpu >= 2.5.0, < 2.5.2 2.5.2 GHSA-5crj-c72x-m7gq
PyPI tensorflow-gpu < 2.4.4 2.4.4 GHSA-5crj-c72x-m7gq
PyPI tensorflow-gpu < 2.4.4 · >= 2.5.0, < 2.5.2 · >= 2.6.0, < 2.6.1 · >= 2.7.0rc0, < 2.7.0 2.4.4, 2.5.2, 2.6.1, 2.7.0 PYSEC-2021-824

References