2.5

CVSS Score

3.1

Basic Information

CVE ID

CVE-2021-29575

GHSA ID

GHSA-6qgm-fv6v-rfpv

EPSS Score

0.19544%

CWE

CWE-119

Published

5/21/2021

Updated

11/1/2024

KEV Status

Technology

Python

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2021-29575

CVE-2021-29575: Overflow/denial of service in `tf.raw_ops.ReverseSequence`

Impact

The implementation of tf.raw_ops.ReverseSequence allows for stack overflow and/or CHECK-fail based denial of service.

import tensorflow as tf

input = tf.zeros([1, 1, 1], dtype=tf.int32)
seq_lengths = tf.constant([0], shape=[1], dtype=tf.int32)

tf.raw_ops.ReverseSequence(
    input=input, seq_lengths=seq_lengths, seq_dim=-2, batch_dim=0)

The implementation fails to validate that seq_dim and batch_dim arguments are valid.

Negative values for seq_dim can result in stack overflow or CHECK-failure, depending on the version of Eigen code used to implement the operation. Similar behavior can be exhibited by invalid values of batch_dim.

Patches

We have patched the issue in GitHub commit ecf768cbe50cedc0a45ce1ee223146a3d3d26d23.

The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

Attribution

This vulnerability has been reported by Ying Wang and Yakun Zhang of Baidu X-Team.

(GitHub Advisory)

2.5

CVSS Score

3.1

Basic Information

CVE ID

CVE-2021-29575

GHSA ID

GHSA-6qgm-fv6v-rfpv

EPSS Score

0.19544%

CWE

CWE-119

Published

5/21/2021

Updated

11/1/2024

KEV Status

Technology

Python

Technical Details

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
tensorflow	pip	< 2.1.4	2.1.4
tensorflow	pip	>= 2.2.0, < 2.2.3	2.2.3
tensorflow	pip	>= 2.3.0, < 2.3.3	2.3.3
tensorflow	pip	>= 2.4.0, < 2.4.2	2.4.2
tensorflow-cpu	pip	< 2.1.4	2.1.4
tensorflow-cpu	pip	>= 2.2.0, < 2.2.3	2.2.3
tensorflow-cpu	pip	>= 2.3.0, < 2.3.3	2.3.3
tensorflow-cpu	pip	>= 2.4.0, < 2.4.2	2.4.2
tensorflow-gpu	pip	< 2.1.4	2.1.4
tensorflow-gpu	pip	>= 2.2.0, < 2.2.3	2.2.3
tensorflow-gpu	pip	>= 2.3.0, < 2.3.3	2.3.3
tensorflow-gpu	pip	>= 2.4.0, < 2.4.2	2.4.2

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability stems from missing validation checks in the ReverseSequenceOp constructor where 'seq_dim' and 'batch_dim' attributes were retrieved but not properly validated. The commit diff explicitly shows these validations were added via OP_REQUIRES(context, ...) calls in this constructor, confirming this was the vulnerable location. The CWE mappings (CWE-119, CWE-787) and vulnerability description directly correlate to this lack of bounds checking in dimension arguments.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

### Imp**t T** impl*m*nt*tion o* `t*.r*w_ops.R*v*rs*S*qu*n**` *llows *or st**k ov*r*low *n*/or `****K`-**il **s** **ni*l o* s*rvi**. ```pyt*on import t*nsor*low *s t* input = t*.z*ros([*, *, *], *typ*=t*.int**) s*q_l*n*t*s = t*.*onst*nt([*], s**p*=

Reasoning

T** vuln*r**ility st*ms *rom missin* v*li**tion ****ks in t** R*v*rs*S*qu*n**Op *onstru*tor w**r* 's*q_*im' *n* '**t**_*im' *ttri*ut*s w*r* r*tri*v** *ut not prop*rly v*li**t**. T** *ommit *i** *xpli*itly s*ows t**s* v*li**tions w*r* ***** vi* OP_R*Q

2.5

Basic Information

Concerned about an active attack path?

CVE-2021-29575: Overflow/denial of service in `tf.raw_ops.ReverseSequence`

Impact

Patches

For more information

Attribution

2.5

Basic Information

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability Intelligence
Miggo AI