PT-2020-14270 · Google · Tensorflow

Mihaimaruseac · Published 2020-09-25 · Updated 2024-03-06 · CVE-2020-15199

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Tensorflow versions prior to 2.3.1

Description The issue arises from the RaggedCountSparseOutput not validating that the input arguments form a valid ragged tensor, specifically lacking validation that the splits tensor has the minimum required number of elements. This leads to a situation where if a user passes a splits tensor that is empty or has exactly one element, the operating system raises a SIGABRT signal. The problem is related to the BatchedMap being equivalent to a vector, which needs at least one element to not be nullptr.

Recommendations For versions prior to 2.3.1, upgrade to TensorFlow 2.3.1 to resolve the issue. As a temporary workaround, consider validating the input to ensure the splits tensor has more than one element before passing it to RaggedCountSparseOutput. Restrict access to the RaggedCountSparseOutput function until the issue is resolved by upgrading to the patched version.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BIT-TENSORFLOW-2020-15199

CVE-2020-15199

GHSA-X5CP-9PCF-PP3H

PYSEC-2020-122

PYSEC-2020-279

PYSEC-2020-314

Affected Products

Tensorflow

References · 14

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x5cp-9pcf-pp3h · Exploit
• https://github.com/tensorflow/tensorflow/commit/3cbb917b4714766030b28eba9fb41bb97ce9ee02 · Patch
• https://osv.dev/vulnerability/BIT-tensorflow-2020-15199 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15199 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15199 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-314 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-279 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-122 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x5cp-9pcf-pp3h · Vendor Advisory
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-314.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-122.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-279.yaml · Note