CVE-2020-15199

Description

In Tensorflow before version 2.3.1, the RaggedCountSparseOutput does not validate that the input arguments form a valid ragged tensor. In particular, there is no validation that the splits tensor has the minimum required number of elements. Code uses this quantity to initialize a different data structure. Since BatchedMap is equivalent to a vector, it needs to have at least one element to not be nullptr. If user passes a splits tensor that is empty or has exactly one element, we get a SIGABRT signal raised by the operating system. The issue is patched in commit 3cbb917b4714766030b28eba9fb41bb97ce9ee02 and is released in TensorFlow version 2.3.1.

Risk Information

Base Score

5.9

MODERATE

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.239

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities are fixed in Python-tensorflow 2.3.1	Windows
Multiple vulnerabilities are fixed in Python-tensorflow-cpu 2.3.1	Windows
Multiple vulnerabilities are fixed in Python-tensorflow-gpu 2.3.1	Windows
Multiple vulnerabilities are fixed in Python-tensorflow for linux 2.3.1	Linux
Multiple vulnerabilities are fixed in Python-tensorflow-cpu for linux 2.3.1	Linux
Multiple vulnerabilities are fixed in Python-tensorflow-gpu for linux 2.3.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234