tocsin

CVE-2020-15209

6 advisories.

PyPI/tensorflow CVE-2020-15209: medium 5.9, EPSS 0.80%

Null pointer dereference in tensorflow-lite

Action: Upgrade tensorflow to 1.15.4 or later.

pip install tensorflow==1.15.4
pip install tensorflow==2.0.3
pip install tensorflow==2.1.2
pip install tensorflow==2.2.1
pip install tensorflow==2.3.1

Affected

introducedfixedlast affected
01.15.4-
2.0.02.0.3-
2.1.02.1.2-
2.2.02.2.1-
2.3.02.3.1-

Fixed versions

1.15.42.0.32.1.22.2.12.3.1

Sources

CVE-2020-15209 · published · modified · JSON

PyPI/tensorflow-cpu CVE-2020-15209: medium 5.9, EPSS 0.80%

Null pointer dereference in tensorflow-lite

Action: Upgrade tensorflow-cpu to 1.15.4 or later.

pip install tensorflow-cpu==1.15.4
pip install tensorflow-cpu==2.0.3
pip install tensorflow-cpu==2.1.2
pip install tensorflow-cpu==2.2.1
pip install tensorflow-cpu==2.3.1

Affected

introducedfixedlast affected
01.15.4-
2.0.02.0.3-
2.1.02.1.2-
2.2.02.2.1-
2.3.02.3.1-

Fixed versions

1.15.42.0.32.1.22.2.12.3.1

Sources

CVE-2020-15209 · published · modified · JSON

PyPI/tensorflow-gpu CVE-2020-15209: medium 5.9, EPSS 0.80%

Null pointer dereference in tensorflow-lite

Action: Upgrade tensorflow-gpu to 1.15.4 or later.

pip install tensorflow-gpu==1.15.4
pip install tensorflow-gpu==2.0.3
pip install tensorflow-gpu==2.1.2
pip install tensorflow-gpu==2.2.1
pip install tensorflow-gpu==2.3.1

Affected

introducedfixedlast affected
01.15.4-
2.0.02.0.3-
2.1.02.1.2-
2.2.02.2.1-
2.3.02.3.1-

Fixed versions

1.15.42.0.32.1.22.2.12.3.1

Sources

CVE-2020-15209 · published · modified · JSON

PyPI/tensorflow CVE-2020-15209: unknown, EPSS 0.80%

In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLite model can force a node to have as input a tensor backed by a `nullptr` buffer. This can be achieved by changi

Action: Upgrade tensorflow to 1.15.4 or later.

pip install tensorflow==1.15.4
pip install tensorflow==2.0.3
pip install tensorflow==2.1.2
pip install tensorflow==2.2.1
pip install tensorflow==2.3.1

Affected

introducedfixedlast affected
01.15.4-
2.0.02.0.3-
2.1.02.1.2-
2.2.02.2.1-
2.3.02.3.1-

Fixed versions

1.15.42.0.32.1.22.2.12.3.1

Sources

CVE-2020-15209 · published · modified · JSON

PyPI/tensorflow-cpu CVE-2020-15209: unknown, EPSS 0.80%

In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLite model can force a node to have as input a tensor backed by a `nullptr` buffer. This can be achieved by changi

Action: Upgrade tensorflow-cpu to 1.15.4 or later.

pip install tensorflow-cpu==1.15.4
pip install tensorflow-cpu==2.0.3
pip install tensorflow-cpu==2.1.2
pip install tensorflow-cpu==2.2.1
pip install tensorflow-cpu==2.3.1

Affected

introducedfixedlast affected
01.15.4-
2.0.02.0.3-
2.1.02.1.2-
2.2.02.2.1-
2.3.02.3.1-

Fixed versions

1.15.42.0.32.1.22.2.12.3.1

Sources

CVE-2020-15209 · published · modified · JSON

PyPI/tensorflow-gpu CVE-2020-15209: unknown, EPSS 0.80%

In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLite model can force a node to have as input a tensor backed by a `nullptr` buffer. This can be achieved by changi

Action: Upgrade tensorflow-gpu to 1.15.4 or later.

pip install tensorflow-gpu==1.15.4
pip install tensorflow-gpu==2.0.3
pip install tensorflow-gpu==2.1.2
pip install tensorflow-gpu==2.2.1
pip install tensorflow-gpu==2.3.1

Affected

introducedfixedlast affected
01.15.4-
2.0.02.0.3-
2.1.02.1.2-
2.2.02.2.1-
2.3.02.3.1-

Fixed versions

1.15.42.0.32.1.22.2.12.3.1

Sources

CVE-2020-15209 · published · modified · JSON