Detections
Analytics

SCA: security update for tensorflow, tensorflow-cpu, tensorflow-gpu (GHSA-m7fm-4jfh-jrg6)

high Tenable Cloud Security Plugin ID 416810

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - TensorFlow is an end-to-end open source platform for machine learning. In affected versions the
 implementation for `tf.raw_ops.BoostedTreesCreateEnsemble` can result in a use after free error if an
 attacker supplies specially crafted arguments. The [implementation](https://github.com/tensorflow/tensorfl
 ow/blob/f24faa153ad31a4b51578f8181d3aaab77a1ddeb/tensorflow/core/kernels/boosted_trees/resource_ops.cc#L55
 ) uses a reference counted resource and decrements the refcount if the initialization fails, as it should.
 However, when the code was written, the resource was represented as a naked pointer but later refactoring
 has changed it to be a smart pointer. Thus, when the pointer leaves the scope, a subsequent `free`-ing of
 the resource occurs, but this fails to take into account that the refcount has already reached 0, thus the
 resource has been already freed. During this double-free process, members of the resource object are
 accessed for cleanup but they are invalid as the entire resource has been freed. We have patched the issue
 in GitHub commit 5ecec9c6fbdbc6be03295685190a45e7eee726ab. The fix will be included in TensorFlow 2.6.0.
 We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these
 are also affected and still in supported range. (CVE-2021-37652)

See Also

https://github.com/advisories/GHSA-m7fm-4jfh-jrg6

Plugin Details

Severity: High

ID: 416810

Version: Revision 1.7

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.12

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: Medium

Base Score: 4.6

Temporal Score: 3.4

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2021-37652

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: High

Base Score: 8.5

Threat Score: 5.9

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 8/25/2021

Vulnerability Publication Date: 8/12/2021

Reference Information

CVE: CVE-2021-37652