PT-2020-14266 · Google+1 · Tensorflow+1

Published 2020-09-25 · Updated 2024-03-06 · CVE-2020-15195

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tensorflow versions prior to 1.15.4 Tensorflow versions prior to 2.0.3 Tensorflow versions prior to 2.1.2 Tensorflow versions prior to 2.2.1 Tensorflow versions prior to 2.3.1

Description The implementation of SparseFillEmptyRowsGrad uses a double indexing pattern, which can result in reverse index map(i) being an index outside the bounds of grad values, thus causing a heap buffer overflow.

Recommendations For versions prior to 1.15.4, upgrade to TensorFlow 1.15.4. For versions prior to 2.0.3, upgrade to TensorFlow 2.0.3. For versions prior to 2.1.2, upgrade to TensorFlow 2.1.2. For versions prior to 2.2.1, upgrade to TensorFlow 2.2.1. For versions prior to 2.3.1, upgrade to TensorFlow 2.3.1.

Exploit

Fix

Memory Corruption

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

CWE-119

Related Identifiers

BIT-TENSORFLOW-2020-15195

CVE-2020-15195

GHSA-63XM-RX5P-XVQR

OPENSUSE-SU-2020:1766-1

OPENSUSE-SU-2020_1766-1

PYSEC-2020-118

PYSEC-2020-275

PYSEC-2020-310

Affected Products

Suse

Tensorflow

References · 37

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-63xm-rx5p-xvqr · Exploit
• https://github.com/tensorflow/tensorflow/commit/390611e0d45c5793c7066110af37c8514e6a6c54 · Patch
• https://osv.dev/vulnerability/PYSEC-2020-118 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15195 · Security Note
• https://osv.dev/vulnerability/PYSEC-2020-275 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15195 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2020-15195 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1766-1 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-310 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-63xm-rx5p-xvqr · Vendor Advisory
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-118.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-310.yaml · Note