CVE Vulnerability

CVE-2020-15203

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `fill` argument of tf.strings.as_string, a malicious attacker is able to trigger a format string vulnerability due to the way the internal format use in a `printf` call is constructed. This may result in segmentation fault. The issue is patched in commit 33be22c65d86256e6826666662e40dbdfe70ee83, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

Scope

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/tensorflow/tensorflow/commit/33be22c65d86256e6826666662e40dbdfe70ee83 Patch Third Party Advisory
https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 Third Party Advisory
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xmq7-7fxm-rr79 Exploit Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html Mailing List Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:google:tensorflow:*:*:*:*:-:*:*:*
cpe:2.3:a:google:tensorflow:*:*:*:*:-:*:*:*
cpe:2.3:a:google:tensorflow:*:*:*:*:-:*:*:*
cpe:2.3:a:google:tensorflow:*:*:*:*:-:*:*:*
cpe:2.3:a:google:tensorflow:*:*:*:*:-:*:*:*
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*
Information

Published : 2020-09-25 07:15

Updated : 2021-11-18 05:26

NVD link : CVE-2020-15203

Mitre link : CVE-2020-15203

Products Affected
No products.
CWE
CWE-134

Use of Externally-Controlled Format String