CVE-2020-15194

描述

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `SparseFillEmptyRowsGrad` implementation has incomplete validation of the shapes of its arguments. Although `reverse_index_map_t` and `grad_values_t` are accessed in a similar pattern, only `reverse_index_map_t` is validated to be of proper shape. Hence, malicious users can pass a bad `grad_values_t` to trigger an assertion failure in `vec`, causing denial of service in serving installations. The issue is patched in commit 390611e0d45c5793c7066110af37c8514e6a6c54, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1."

如何修補 CVE-2020-15194

要修補 CVE-2020-15194,請將受影響套件升級到下列已修補版本。

• —升級至 1.15.4 或更新版本
• —升級至 1.15.4 或更新版本
• —升級至 1.15.4 或更新版本

CVE-2020-15194 正在被利用嗎?

低 — EPSS 為 1.0%,目前沒有觀察到大規模利用活動。

受影響套件(3)

• from 0, < 1.15.4
• from 0, < 1.15.4
• from 0, < 1.15.4

CVSS 分數

參考連結(9)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2020-15194
• PATCHgithub.com/tensorflow/tensorflow
• WEBlists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html
• WEBgithub.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-274.yaml