PT-2020-14262 · Google+1 · Tensorflow+1

Published 2020-09-25 · Updated 2024-03-06 · CVE-2020-15191

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Tensorflow versions prior to 2.2.1 Tensorflow versions prior to 2.3.1

Description The issue arises when a user passes an invalid argument to dlpack.to dlpack, causing variables to bind to nullptr while setting a status variable to the error condition. However, this status argument is not properly checked, leading to code following these methods binding references to null pointers. This results in undefined behavior and is reported as an error if compiling with -fsanitize=null.

Recommendations For versions prior to 2.2.1, upgrade to TensorFlow 2.2.1. For versions prior to 2.3.1, upgrade to TensorFlow 2.3.1. As a temporary workaround, consider adding proper checks for the status argument after calling dlpack.to dlpack to prevent binding references to null pointers.

Exploit

Fix

Unchecked Return Value

NULL Pointer Dereference

RCE

Weakness Enumeration

CWE-252

CWE-476

CWE-20

Related Identifiers

BIT-TENSORFLOW-2020-15191

CVE-2020-15191

GHSA-Q8QJ-FC9Q-CPHR

OPENSUSE-SU-2020:1766-1

OPENSUSE-SU-2020_1766-1

OPENSUSE-SU-2024:12116-1

PYSEC-2020-114

PYSEC-2020-271

PYSEC-2020-306

Affected Products

Suse

Tensorflow

References · 37

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q8qj-fc9q-cphr · Exploit
• https://github.com/tensorflow/tensorflow/commit/22e07fb204386768e5bcbea563641ea11f96ceb8 · Patch
• https://osv.dev/vulnerability/CVE-2020-15191 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15191 · Security Note
• https://osv.dev/vulnerability/PYSEC-2020-271 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1766-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q8qj-fc9q-cphr · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-114 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-306 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2020-15191 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-114.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-271.yaml · Note