PT-2020-14281 · Google+1 · Tensorflow+1

Published 2020-09-25 · Updated 2024-03-06 · CVE-2020-15210

Positive Technologies (AI Summary)

CVSS v4.0

8.3

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 1.15.4 TensorFlow versions prior to 2.0.3 TensorFlow versions prior to 2.1.2 TensorFlow versions prior to 2.2.1 TensorFlow versions prior to 2.3.1

Description If a TFLite saved model uses the same tensor as both input and output of an operator, it can cause a segmentation fault or memory corruption, depending on the operator.

Recommendations For versions prior to 1.15.4, upgrade to TensorFlow 1.15.4. For versions prior to 2.0.3, upgrade to TensorFlow 2.0.3. For versions prior to 2.1.2, upgrade to TensorFlow 2.1.2. For versions prior to 2.2.1, upgrade to TensorFlow 2.2.1. For versions prior to 2.3.1, upgrade to TensorFlow 2.3.1. As a temporary workaround, consider adding a custom Verifier to the model loading code to ensure that no operator reuses tensors as both inputs and outputs.

Exploit

Fix

Memory Corruption

RCE

Weakness Enumeration

CWE-787

CWE-20

Related Identifiers

BIT-TENSORFLOW-2020-15210

CVE-2020-15210

GHSA-X9J7-X98R-R4W2

OPENSUSE-SU-2020:1766-1

OPENSUSE-SU-2020_1766-1

PYSEC-2020-133

PYSEC-2020-290

PYSEC-2020-325

Affected Products

Suse

Tensorflow

References · 42

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x9j7-x98r-r4w2 · Exploit
• https://github.com/tensorflow/tensorflow/commit/d58c96946b2880991d63d1dacacb32f0a4dfa453 · Patch
• https://osv.dev/vulnerability/BIT-tensorflow-2020-15210 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-325 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x9j7-x98r-r4w2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15210 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15210 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-133 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1766-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-290 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 · Note
• https://github.com/tensorflow/tensorflow/commit/f4159ccef23d11eb58ee4263beaaeac1be3343c7 · Note
• https://github.com/tensorflow/tensorflow/commit/094329d0dcb8290bed2b1ee420934971f422c86d · Note
• https://github.com/tensorflow/tensorflow/commit/8c2092e9f9ef78b3f9060f8bf5ce7a49d1ccdc8f · Note