PT-2020-14273 · Google+1 · Tensorflow+1

Mihaimaruseac · Published 2020-09-25 · Updated 2024-03-06 · CVE-2020-15202

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 1.15.4 TensorFlow versions prior to 2.0.3 TensorFlow versions prior to 2.1.2 TensorFlow versions prior to 2.2.1 TensorFlow versions prior to 2.3.1

Description The Shard API in TensorFlow expects the last argument to be a function taking two int64 arguments. However, there are several places in TensorFlow where a lambda taking int or int32 arguments is being used. This can result in integer truncation, leading to segfaults, read/write outside of heap allocated arrays, stack overflows, or data corruption.

Recommendations To resolve the issue, upgrade to TensorFlow 1.15.4 or later. To resolve the issue, upgrade to TensorFlow 2.0.3 or later. To resolve the issue, upgrade to TensorFlow 2.1.2 or later. To resolve the issue, upgrade to TensorFlow 2.2.1 or later. To resolve the issue, upgrade to TensorFlow 2.3.1 or later.

Exploit

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-197

CWE-754

Related Identifiers

BIT-TENSORFLOW-2020-15202

CVE-2020-15202

GHSA-H6FG-MJXG-HQQ4

OPENSUSE-SU-2020:1766-1

OPENSUSE-SU-2020_1766-1

OPENSUSE-SU-2024:12116-1

PYSEC-2020-125

PYSEC-2020-282

PYSEC-2020-317

Affected Products

Suse

Tensorflow

References · 38

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h6fg-mjxg-hqq4 · Exploit
• https://github.com/tensorflow/tensorflow/commit/27b417360cbd671ef55915e4bb6bb06af8b8a832 · Patch
• https://github.com/tensorflow/tensorflow/commit/ca8c013b5e97b1373b3bb1c97ea655e69f31a575 · Patch
• https://osv.dev/vulnerability/PYSEC-2020-125 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-317 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15202 · Security Note
• https://osv.dev/vulnerability/GHSA-h6fg-mjxg-hqq4 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1766-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-282 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2020-15202 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15202 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-125.yaml · Note