Vulnerability · Published Sep 25, 2020 · Assigned by GitHub_M
CVE-2020-15194Denial of Service in Tensorflow
Medium 5.3
In plain English
A medium-severity improper input validation in tensorflow from tensorflow. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `SparseFillEmptyRowsGrad` implementation has incomplete validation of the shapes of its arguments. Although `reverse_index_map_t` and `grad_values_t` are accessed in a similar pattern, only `reverse_index_map_t` is validated to be of proper shape. Hence, malicious users can pass a bad `grad_values_t` to trigger an assertion failure in `vec`, causing denial of service in serving installations. The issue is patched in commit 390611e0d45c5793c7066110af37c8514e6a6c54, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1."
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | tensorflow | 2.1.2 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow | 2.2.1 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow | 2.3.1 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow | 1.15.4 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow | 1.15.4, 2.0.3, 2.1.2, 2.2.1, 2.3.1 | PYSEC-2020-117 |
| PyPI | tensorflow | 2.0.3 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow-cpu | 2.3.1 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow-cpu | 1.15.4 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow-cpu | 2.0.3 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow-cpu | 2.1.2 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow-cpu | 2.2.1 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow-cpu | 1.15.4, 2.0.3, 2.1.2, 2.2.1, 2.3.1 | PYSEC-2020-274 |
| PyPI | tensorflow-gpu | 2.1.2 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow-gpu | 2.2.1 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow-gpu | 2.3.1 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow-gpu | 1.15.4 | GHSA-9mqp-7v2h-2382 |
| PyPI | tensorflow-gpu | 1.15.4, 2.0.3, 2.1.2, 2.2.1, 2.3.1 | PYSEC-2020-309 |
| PyPI | tensorflow-gpu | 2.0.3 | GHSA-9mqp-7v2h-2382 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| tensorflow | tensorflow | < 1.15.4>= 2.0.0, < 2.0.3>= 2.1.0, < 2.1.2>= 2.2.0, < 2.2.1>= 2.3.0, < 2.3.1 |
Weakness: CWE-617, CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
References
- https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 x_refsource_MISC
- https://github.com/tensorflow/tensorflow/commit/390611e0d45c5793c7066110af37c8514e6a6c54 x_refsource_MISC
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9mqp-7v2h-2382 x_refsource_CONFIRM
- openSUSE-SU-2020:1766 vendor-advisory, x_refsource_SUSE