Vulnerabilities
Projects
Vulnerability Disclosure
About Us
Contact Us
Mend.io Vulnerability Database
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
We found results for “”
CVE-2020-15207
Good to know:
Date: September 25, 2020
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python's indexing with negative values, TFLite uses "ResolveAxis" to convert negative values to positive indices. However, the only check that the converted index is now valid is only present in debug builds. If the "DCHECK" does not trigger, then code execution moves ahead with a negative index. This, in turn, results in accessing data out of bounds which results in segfaults and/or data corruption. The issue is patched in commit 2d88f470dea2671b430884260f3626b1fe99830a, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.
Language: C++
Severity Score
Related Resources (10)
Severity Score
Weakness Type (CWE)
Top Fix
Upgrade Version
Upgrade to version tensorflow - 1.15.4;tensorflow - 2.0.3;tensorflow - 2.1.2;tensorflow - 2.2.1;tensorflow - 2.3.1;tensorflow-cpu - 2.1.2;tensorflow-cpu - 2.2.1;tensorflow-cpu - 2.3.1;tensorflow-gpu - 1.15.4;tensorflow-gpu - 2.0.3;tensorflow-gpu - 2.1.2;tensorflow-gpu - 2.2.1;tensorflow-gpu - 2.3.1
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | NETWORK |
| Attack Complexity (AC): | HIGH |
| Privileges Required (PR): | NONE |
| User Interaction (UI): | NONE |
| Scope (S): | CHANGED |
| Confidentiality (C): | NONE |
| Integrity (I): | HIGH |
| Availability (A): | HIGH |
CVSS v2
| Base Score: |
|
|---|---|
| Access Vector (AV): | NETWORK |
| Access Complexity (AC): | MEDIUM |
| Authentication (AU): | NONE |
| Confidentiality (C): | PARTIAL |
| Integrity (I): | PARTIAL |
| Availability (A): | PARTIAL |
| Additional information: |