PT-2020-14284 · Google · Tensorflow Lite

Published 2020-09-25 · Updated 2024-03-06 · CVE-2020-15213

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Medium

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L

Name of the Vulnerable Software and Affected Versions TensorFlow Lite versions prior to 2.2.1 TensorFlow Lite versions prior to 2.3.1

Description The issue allows attackers to trigger a denial of service by causing an out of memory allocation in the implementation of segment sum. This is possible because the code uses the last element of the tensor holding segment ids to determine the dimensionality of the output tensor, and attackers can use a very large value to trigger a large allocation.

Recommendations For versions prior to 2.2.1, upgrade to TensorFlow 2.2.1. For versions prior to 2.3.1, upgrade to TensorFlow 2.3.1. As a temporary workaround, consider adding a custom Verifier to limit the maximum value in the segment ids tensor, but this only handles the case when the segment ids are stored statically in the model. If the segment ids are generated as outputs of a tensor during inference steps, there are no possible workarounds and users are advised to upgrade to patched code.

Exploit

Fix

Allocation of Resources Without Limits

Buffer Overflow

Weakness Enumeration

CWE-770

CWE-119

Related Identifiers

BIT-TENSORFLOW-2020-15213

CVE-2020-15213

GHSA-HJMQ-236J-8M87

PYSEC-2020-136

PYSEC-2020-293

PYSEC-2020-328

Affected Products

Tensorflow Lite

References · 17

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hjmq-236j-8m87 · Exploit
• https://github.com/tensorflow/tensorflow/commit/204945b19e44b57906c9344c0d00120eeeae178a · Patch
• https://osv.dev/vulnerability/BIT-tensorflow-2020-15213 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15213 · Security Note
• https://osv.dev/vulnerability/PYSEC-2020-293 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15213 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-328 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hjmq-236j-8m87 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-136 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 · Note
• https://github.com/tensorflow/tensorflow/blob/0e68f4d3295eb0281a517c3662f6698992b7b2cf/tensorflow/lite/kernels/segment_sum.cc#L39-L44 · Note
• https://github.com/tensorflow/tensorflow/commit/a4030d8ba3692c438997c27be2dd95f3d5f54827 · Note
• https://github.com/tensorflow/tensorflow/commit/00c7ed7ce81c2126ebc17dfe7073b5c0efd5ec0a · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-293.yaml · Note