CVE-2021-35958 Path traversal in n/a
Attackers can overwrite arbitrary files via crafted archives in TensorFlow's get_file utility, though the vendor deems this out of scope for untrusted input.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-35958?
CVE-2021-35958 is a critical path traversal vulnerability in Google Tensorflow, published on 30 Jun 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the vendor's position is that tf.keras.utils.get_file is not intended for untrusted archives
Weakness: CWE-22
Which versions are affected by CVE-2021-35958?
1 open source package ship an affected version, including tensorflow. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
tensorflow Bitnami | All versions | 2.5.1 |
Products include Google Tensorflow.
How do I fix CVE-2021-35958?
Upgrade tensorflow to 2.5.1 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2021-35958 being exploited?
There is no known exploitation of CVE-2021-35958 in the wild and no public exploit code.
Other vulnerabilities in Google Tensorflow
- CVE-2023-25668 TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation
- CVE-2018-7575 Integer Overflow or Wraparound in Google TensorFlow
- CVE-2021-37678 Arbitrary code execution due to YAML deserialization
- CVE-2020-15202 Integer truncation in Shard API usage
- CVE-2020-15205 Data leak in Tensorflow
Sources
Also known as BIT-tensorflow-2021-35958, GHSA-4cm9-63x5-55wm.