PT-2020-14278 · Google+1 · Tensorflow+1

Published 2020-09-25 · Updated 2024-03-06 · CVE-2020-15207

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 1.15.4 TensorFlow versions prior to 2.0.3 TensorFlow versions prior to 2.1.2 TensorFlow versions prior to 2.2.1 TensorFlow versions prior to 2.3.1

Description The issue arises from TensorFlow's attempt to mimic Python's indexing with negative values using ResolveAxis to convert negative values to positive indices. However, the check for a valid converted index is only present in debug builds. If this check does not trigger, the code proceeds with a negative index, leading to out-of-bounds data access, which can cause segfaults and/or data corruption.

Recommendations To resolve the issue, upgrade to TensorFlow 1.15.4 or later. To resolve the issue, upgrade to TensorFlow 2.0.3 or later. To resolve the issue, upgrade to TensorFlow 2.1.2 or later. To resolve the issue, upgrade to TensorFlow 2.2.1 or later. To resolve the issue, upgrade to TensorFlow 2.3.1 or later.

Exploit

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

BIT-TENSORFLOW-2020-15207

CVE-2020-15207

GHSA-Q4QF-3FC6-8X34

OPENSUSE-SU-2020:1766-1

OPENSUSE-SU-2020_1766-1

OPENSUSE-SU-2024:12116-1

PYSEC-2020-130

PYSEC-2020-287

PYSEC-2020-322

Affected Products

Suse

Tensorflow

References · 37

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q4qf-3fc6-8x34 · Exploit
• https://github.com/tensorflow/tensorflow/commit/2d88f470dea2671b430884260f3626b1fe99830a · Patch
• https://osv.dev/vulnerability/GHSA-q4qf-3fc6-8x34 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2020-15207 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-130 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-287 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15207 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2020:1766-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-322 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15207 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-130.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-287.yaml · Note