PT-2020-14276 · Google+1 · Tensorflow+1

Published 2020-09-25 · Updated 2024-03-06 · CVE-2020-15205

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 1.15.4 TensorFlow versions prior to 2.0.3 TensorFlow versions prior to 2.1.2 TensorFlow versions prior to 2.2.1 TensorFlow versions prior to 2.3.1

Description The data splits argument of tf.raw ops.StringNGrams lacks validation, allowing users to pass values that can cause heap overflow errors and leak contents of memory. This data leak can be used to defeat ASLR, as the leaked memory contents can contain return addresses.

Recommendations For versions prior to 1.15.4, upgrade to TensorFlow 1.15.4. For versions prior to 2.0.3, upgrade to TensorFlow 2.0.3. For versions prior to 2.1.2, upgrade to TensorFlow 2.1.2. For versions prior to 2.2.1, upgrade to TensorFlow 2.2.1. For versions prior to 2.3.1, upgrade to TensorFlow 2.3.1.

Exploit

Fix

Memory Corruption

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

CWE-119

Related Identifiers

BIT-TENSORFLOW-2020-15205

CVE-2020-15205

GHSA-G7P5-5759-QV46

OPENSUSE-SU-2020:1766-1

OPENSUSE-SU-2020_1766-1

OPENSUSE-SU-2024:12116-1

PYSEC-2020-128

PYSEC-2020-285

PYSEC-2020-320

Affected Products

Suse

Tensorflow

References · 37

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g7p5-5759-qv46 · Exploit
• https://github.com/tensorflow/tensorflow/commit/0462de5b544ed4731aa2fb23946ac22c01856b80 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-15205 · Security Note
• https://osv.dev/vulnerability/PYSEC-2020-128 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15205 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1766-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-285 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g7p5-5759-qv46 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2020-15205 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-320 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-320.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-285.yaml · Note