In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `fill` argument of tf.strings.as_string, a malicious attacker is able to trigger a format string vulnerability due to the way the internal format use in a `printf` call is constructed. This may result in segmentation fault. The issue is patched in commit 33be22c65d86256e6826666662e40dbdfe70ee83, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `fill` argument of
    tf.strings.as_string, a malicious attacker is able to trigger a format string vulnerability due to the way
    the internal format use in a `printf` call is constructed. This may result in segmentation fault. The
    issue is patched in commit 33be22c65d86256e6826666662e40dbdfe70ee83, and is released in TensorFlow
    versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1. (CVE-2020-15203)

This update for tensorflow2 fixes the following issues :

  - updated to 2.1.2 with following fixes (boo#1177022) :

  - Fixes an undefined behavior causing a segfault in     tf.raw_ops.Switch (CVE-2020-15190)

  - Fixes three vulnerabilities in conversion to DLPack     format (CVE-2020-15191, CVE-2020-15192, CVE-2020-15193)

  - Fixes two vulnerabilities in SparseFillEmptyRowsGrad     (CVE-2020-15194, CVE-2020-15195)

  - Fixes an integer truncation vulnerability in code using     the work sharder API (CVE-2020-15202)

  - Fixes a format string vulnerability in     tf.strings.as_string (CVE-2020-15203)

  - Fixes segfault raised by calling session-only ops in     eager mode (CVE-2020-15204)

  - Fixes data leak and potential ASLR violation from     tf.raw_ops.StringNGrams (CVE-2020-15205)

  - Fixes segfaults caused by incomplete SavedModel     validation (CVE-2020-15206)

  - Fixes a data corruption due to a bug in negative     indexing support in TFLite (CVE-2020-15207)

  - Fixes a data corruption due to dimension mismatch in     TFLite (CVE-2020-15208)

  - Fixes several vulnerabilities in TFLite saved model     format (CVE-2020-15209, CVE-2020-15210, CVE-2020-15211)

ID	Name	Product	Family	Severity
420584	SCA: security update for tensorflow, tensorflow-cpu, tensorflow-gpu (GHSA-xmq7-7fxm-rr79)	Tenable Cloud Security	SCA Checks	high
420584	SCA: security update for tensorflow, tensorflow-cpu, tensorflow-gpu (GHSA-xmq7-7fxm-rr79)	Tenable Self-Hosted Container Security	SCA Checks	high
142135	openSUSE Security Update : tensorflow2 (openSUSE-2020-1766)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2020-15203

high

Tenable Plugins

high

high

critical