PT-2020-16393 · Google · Tensorflow

Mihaimaruseac · Published 2020-12-10 · Updated 2024-03-06 · CVE-2020-26270

Positive Technologies (AI Summary)

CVSS v4.0

4.8

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 1.15.5 TensorFlow versions prior to 2.0.4 TensorFlow versions prior to 2.1.3 TensorFlow versions prior to 2.2.2 TensorFlow versions prior to 2.3.2 TensorFlow versions prior to 2.4.0

Description In affected versions of TensorFlow, running an LSTM/GRU model where the LSTM/GRU layer receives an input with zero-length results in a CHECK failure when using the CUDA backend. This can result in a query-of-death vulnerability, via denial of service, if users can control the input to the layer.

Recommendations For versions prior to 1.15.5, update to version 1.15.5 or later. For versions prior to 2.0.4, update to version 2.0.4 or later. For versions prior to 2.1.3, update to version 2.1.3 or later. For versions prior to 2.2.2, update to version 2.2.2 or later. For versions prior to 2.3.2, update to version 2.3.2 or later. For versions prior to 2.4.0, update to version 2.4.0 or later. As a temporary workaround, consider restricting user control over the input to the LSTM/GRU layer until a patch is applied.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BIT-TENSORFLOW-2020-26270

CVE-2020-26270

GHSA-M648-33QF-V3GP

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2020-256

PYSEC-2020-301

PYSEC-2020-336

Affected Products

Tensorflow

References · 93

• https://github.com/tensorflow/tensorflow/commit/14755416e364f17fb1870882fa778c7fec7f16e3 · Patch
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m648-33qf-v3gp · Patch
• https://osv.dev/vulnerability/CVE-2020-26270 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-256 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26270 · Security Note
• https://osv.dev/vulnerability/PYSEC-2020-336 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2020-26270 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m648-33qf-v3gp · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-301 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-256.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-301.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-336.yaml · Note
• https://suse.com/security/cve/CVE-2021-37656 · Note