CVE-2020-15201
Description
In Tensorflow before version 2.3.1, the RaggedCountSparseOutput implementation does not validate that the input arguments form a valid ragged tensor. In particular, there is no validation that the values in the splits tensor generate a valid partitioning of the values tensor. Hence, the code is prone to heap buffer overflow. If split_values does not end with a value at least num_values then the while loop condition will trigger a read outside of the bounds of split_values once batch_idx grows too large. The issue is patched in commit 3cbb917b4714766030b28eba9fb41bb97ce9ee02 and is released in TensorFlow version 2.3.1.
Risk Information
Base Score
4.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.195
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple vulnerabilities are fixed in Python-tensorflow 2.3.1 | Windows |
| Multiple vulnerabilities are fixed in Python-tensorflow-cpu 2.3.1 | Windows |
| Multiple vulnerabilities are fixed in Python-tensorflow-gpu 2.3.1 | Windows |
| Multiple vulnerabilities are fixed in Python-tensorflow for linux 2.3.1 | Linux |
| Multiple vulnerabilities are fixed in Python-tensorflow-cpu for linux 2.3.1 | Linux |
| Multiple vulnerabilities are fixed in Python-tensorflow-gpu for linux 2.3.1 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234