PT-2020-8877 · Google · Tensorflow

David G. Andersen · Published 2020-05-04 · Updated 2020-05-13 · CVE-2018-21233

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 1.7.0

Description The issue is caused by an integer overflow that leads to an out-of-bounds read, potentially disclosing the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decode bmp op.cc.

Recommendations For versions prior to 1.7.0, update to version 1.7.0 or later to resolve the issue. As a temporary workaround, consider disabling the DecodeBmp feature of the BMP decoder until a patch is available. Restrict access to the BMP decoder module to minimize the risk of exploitation.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2018-21233

GHSA-H98H-8MXR-M8GX

PYSEC-2020-253

PYSEC-2020-269

PYSEC-2020-304

Affected Products

Tensorflow

References · 15

• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-001.md · Patch
• https://github.com/tensorflow/tensorflow/commit/49f73c55d56edffebde4bca4a407ad69c1cae433 · Patch
• https://osv.dev/vulnerability/PYSEC-2020-269 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-304 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-21233 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-253 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-21233 · Security Note
• https://osv.dev/vulnerability/GHSA-h98h-8mxr-m8gx · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-304.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-253.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-269.yaml · Note
• https://t.me/cibsecurity/11801 · Telegram Post
• https://t.me/cvenotify/3525 · Telegram Post
• https://github.com/advisories/GHSA-h98h-8mxr-m8gx · Note