CyberSec.Space Logo
Back to CVE Browser

CVE-2021-35958

CRITICAL
9.1
CVSS Severity Score
EPSS Score0.0280%
EPSS Percentile13.40th
PublishedJun 30, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the vendor's position is that tf.keras.utils.get_file is not intended for untrusted archives

Affected Platforms (CPE)

📦
Google

Tensorflow

<= 2.5.0

References & Advisories

🔗 https://docs.python.org/3/library/tarfile.html#tarfile.TarFile.extractall
🔗 https://github.com/tensorflow/tensorflow/blob/b8cad4c631096a34461ff8a07840d5f4d123ce32/tensorflow/python/keras/README.md
🔗 https://github.com/tensorflow/tensorflow/blob/b8cad4c631096a34461ff8a07840d5f4d123ce32/tensorflow/python/keras/utils/data_utils.py#L137
🔗 https://keras.io/api/
🔗 https://vuln.ryotak.me/advisories/52
🔗 https://docs.python.org/3/library/tarfile.html#tarfile.TarFile.extractall
🔗 https://github.com/tensorflow/tensorflow/blob/b8cad4c631096a34461ff8a07840d5f4d123ce32/tensorflow/python/keras/README.md
🔗 https://github.com/tensorflow/tensorflow/blob/b8cad4c631096a34461ff8a07840d5f4d123ce32/tensorflow/python/keras/utils/data_utils.py#L137

Related Vulnerabilities

CVE-2018-75759.8

Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent.

CVE-2021-376789.3

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TensorFlow and Keras can be tricked to...

CVE-2020-152029.0

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in TensorFlow expects the last argument to be...

CVE-2020-152059.0

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` argument of `tf.raw_ops.StringNGrams` lacks...