PyPI: tensorflow-gpu
CVE-2020-15196
Safety vulnerability ID: SFTY-20200925-73465
Safety legacy ID: pyup.io-56336
Tensorflow-gpu version 2.3.1 includes a fix for CVE-2020-15196: In Tensorflow version 2.3.0, the "SparseCountSparseOutput" and "RaggedCountSparseOutput" implementations don't validate that the "weights" tensor has the same shape as the data. The check exists for "DenseCountSparseOutput", where both tensors are fully specified. In the sparse and ragged count weights are still accessed in parallel with the data. But, since there is no validation, a user passing fewer weights than the values for the tensors can generate a read from outside the bounds of the heap buffer allocated for the weights. The issue was patched in commit 3cbb917b4714766030b28eba9fb41bb97ce9ee02. https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pg59-2f92-5cph
Overview
Heap buffer overflow in Tensorflow
Advisory
Tensorflow-gpu version 2.3.1 includes a fix for CVE-2020-15196: In Tensorflow version 2.3.0, the "SparseCountSparseOutput" and "RaggedCountSparseOutput" implementations don't validate that the "weights" tensor has the same shape as the data. The check exists for "DenseCountSparseOutput", where both tensors are fully specified. In the sparse and ragged count weights are still accessed in parallel with the data. But, since there is no validation, a user passing fewer weights than the values for the tensors can generate a read from outside the bounds of the heap buffer allocated for the weights. The issue was patched in commit 3cbb917b4714766030b28eba9fb41bb97ce9ee02. https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pg59-2f92-5cph
How to Fix
Mitigation and Workarounds
---
Vulnerable Functions
Functions linked to known vulnerabilities.
References
- https://getsafety.com/vulnerabilities/SFTY-20200925-73465/CVE-2020-15196
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pg59-2f92-5cph
- https://github.com/tensorflow/tensorflow/commit/3cbb917b4714766030b28eba9fb41bb97ce9ee02
- https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1
- https://nvd.nist.gov/vuln/detail/CVE-2020-15196
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-276.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-311.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-119.yaml
- https://github.com/advisories/GHSA-pg59-2f92-5cph
Verified by Safety
Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.
Learn more