CVE-2022-23586

Tensorflow Open Source DoS via SavedModel

• CVSS 6.5
• CWE-617 Reachable Assertion
• Resource Management
• Remote

Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that assertions in `function.cc` would be falsified and crash the Python interpreter. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

CVE

CVE-2022-23586

CWE

CWE-617 Reachable Assertion

CVSS base score

6.5

Published

2022-02-04

OWASP

A08 Software and Data Integrity Failures

Orthogonal defect classification

Function

Code defect classification

Incorrect Functionality

Category

Resource Management

Subcategory

Resource Exhaustion

Accessibility scope

Remote

Impact

Denial of Service (DoS)

Affected component

TensorFlow

Fixed by upgrading

Yes

Solution

Update TensorFlow to version 2.8.0 or higher.

import tensorflow as tf

def load_saved_model(model_path):
    model = tf.saved_model.load(model_path)
    return model

model = load_saved_model("path/to/saved_model")

import tensorflow as tf
import os

def check_model(model_path):
    if not os.path.exists(model_path) or not os.path.isdir(model_path):
        raise ValueError(f"Model path {model_path} is not valid or accessible")
    
    return True

def load_saved_model(model_path):
    try:
        if check_model(model_path):
            model = tf.saved_model.load(model_path)
            return model
    except Exception as e:
        raise RuntimeError(f"Failed to load model from {model_path}: {e}")

try:
    model = load_saved_model("path/to/saved_model")
except Exception as e:
    print(f"Error: {e}")

#Maliciously crafted SavedModel

@misc{vaitp:cve202223586,
  title        = {{Tensorflow Open Source DoS via SavedModel}},
  author       = {Bogaerts, Fr\'ed\'eric and Ivaki, Naghmeh and Fonseca, Jos\'e},
  year         = {2022},
  note         = {VAITP Python Vulnerability Dataset, entry CVE-2022-23586},
  howpublished = {\url{https://netpack.pt/vaitp/vulnerability/CVE-2022-23586/}}
}