5.5

CVSS Score

3.1

Basic Information

CVE ID

CVE-2022-29205

GHSA ID

GHSA-54ch-gjq5-4976

EPSS Score

0.1528%

CWE

CWE-476

Published

5/24/2022

Updated

1/27/2023

KEV Status

Technology

Python

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2022-29205

CVE-2022-29205: Segfault due to missing support for quantized types

Impact

There is a potential for segfault / denial of service in TensorFlow by calling tf.compat.v1.* ops which don't yet have support for quantized types (added after migration to TF 2.x):

import numpy as np
import tensorflow as tf

tf.compat.v1.placeholder_with_default(input=np.array([2]),shape=tf.constant(dtype=tf.qint8, value=np.array([1])))

In these scenarios, since the kernel is missing, a nullptr value is passed to ParseDimensionValue for the py_value argument. Then, this is dereferenced, resulting in segfault.

Patches

We have patched the issue in GitHub commit 237822b59fc504dda2c564787f5d3ad9c4aa62d9.

The fix will be included in TensorFlow 2.9.0. We will also cherrypick this commit on TensorFlow 2.8.1, TensorFlow 2.7.2, and TensorFlow 2.6.4, as these are also affected and still in supported range.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

Attribution

This vulnerability has been reported by Hong Jin from Singapore Management University.

(GitHub Advisory)

5.5

CVSS Score

3.1

Basic Information

CVE ID

CVE-2022-29205

GHSA ID

GHSA-54ch-gjq5-4976

EPSS Score

0.1528%

CWE

CWE-476

Published

5/24/2022

Updated

1/27/2023

KEV Status

Technology

Python

Technical Details

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
tensorflow	pip	< 2.6.4	2.6.4
tensorflow	pip	>= 2.7.0, < 2.7.2	2.7.2
tensorflow	pip	>= 2.8.0, < 2.8.1	2.8.1
tensorflow-cpu	pip	< 2.6.4	2.6.4
tensorflow-cpu	pip	>= 2.7.0, < 2.7.2	2.7.2
tensorflow-cpu	pip	>= 2.8.0, < 2.8.1	2.8.1
tensorflow-gpu	pip	< 2.6.4	2.6.4
tensorflow-gpu	pip	>= 2.7.0, < 2.7.2	2.7.2
tensorflow-gpu	pip	>= 2.8.0, < 2.8.1	2.8.1

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability stemmed from two key issues: (1) Missing kernel registrations for quantized types in StridedSlice operations (evidenced by the commit adding TF_CALL_QUANTIZED_TYPES to strided_slice_op.cc/impl.h), and (2) insufficient null-checking in ParseDimensionValue when handling shape extraction. The StridedSliceOp and StridedSliceAssignOp were vulnerable due to lacking quantized type support, leading to nullptr kernel returns. ParseDimensionValue became a crash vector when it received this nullptr due to the missing kernel. The commit patched both the kernel registration and null-checking aspects.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

### Imp**t T**r* is * pot*nti*l *or s****ult / **ni*l o* s*rvi** in T*nsor*low *y **llin* `t*.*omp*t.v*.*` ops w*i** *on't y*t **v* support *or qu*ntiz** typ*s (***** **t*r mi*r*tion to T* *.x): ```pyt*on import numpy *s np import t*nsor*low *s t*

Reasoning

T** vuln*r**ility st*mm** *rom two k*y issu*s: (*) Missin* k*rn*l r**istr*tions *or qu*ntiz** typ*s in Stri***Sli** op*r*tions (*vi**n*** *y t** *ommit ***in* T*_**LL_QU*NTIZ**_TYP*S to stri***_sli**_op.**/impl.*), *n* (*) insu**i*i*nt null-****kin*

5.5

Basic Information

Concerned about an active attack path?

CVE-2022-29205: Segfault due to missing support for quantized types

Impact

Patches

For more information

Attribution

5.5

Basic Information

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability Intelligence
Miggo AI