PT-2020-14265 · Google+1 · Tensorflow+1

Mihaimaruseac · Published 2020-09-25 · Updated 2024-03-06 · CVE-2020-15194

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Tensorflow versions prior to 1.15.4 Tensorflow versions prior to 2.0.3 Tensorflow versions prior to 2.1.2 Tensorflow versions prior to 2.2.1 Tensorflow versions prior to 2.3.1

Description The SparseFillEmptyRowsGrad implementation has incomplete validation of the shapes of its arguments. Although reverse index map t and grad values t are accessed in a similar pattern, only reverse index map t is validated to be of proper shape. This allows malicious users to pass a bad grad values t to trigger an assertion failure in vec, causing denial of service in serving installations.

Recommendations To resolve the issue, upgrade to TensorFlow 1.15.4 or later. To resolve the issue, upgrade to TensorFlow 2.0.3 or later. To resolve the issue, upgrade to TensorFlow 2.1.2 or later. To resolve the issue, upgrade to TensorFlow 2.2.1 or later. To resolve the issue, upgrade to TensorFlow 2.3.1 or later.

Exploit

Fix

DoS

Assertion Failure

RCE

Weakness Enumeration

CWE-617

CWE-20

Related Identifiers

BIT-TENSORFLOW-2020-15194

CVE-2020-15194

GHSA-9MQP-7V2H-2382

OPENSUSE-SU-2020:1766-1

OPENSUSE-SU-2020_1766-1

OPENSUSE-SU-2024:12116-1

PYSEC-2020-117

PYSEC-2020-274

PYSEC-2020-309

Affected Products

Suse

Tensorflow

References · 37

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9mqp-7v2h-2382 · Exploit
• https://github.com/tensorflow/tensorflow/commit/390611e0d45c5793c7066110af37c8514e6a6c54 · Patch
• https://osv.dev/vulnerability/CVE-2020-15194 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-309 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15194 · Security Note
• https://osv.dev/vulnerability/PYSEC-2020-117 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1766-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9mqp-7v2h-2382 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2020-15194 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-274 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-309.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-117.yaml · Note