CVE-2020-15212
6 advisories.
PyPI/tensorflow CVE-2020-15212: high 8.1
Out of bounds access in tensorflow-lite
Action: Upgrade tensorflow to 2.2.1 or later.
pip install tensorflow==2.2.1pip install tensorflow==2.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | 2.2.1 | - |
| 2.3.0 | 2.3.1 | - |
Fixed versions
| 2.2.1 | 2.3.1 |
Sources
- osv: GHSA-hx2x-85gr-wrpq
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hx2x-85gr-wrpq
- https://nvd.nist.gov/vuln/detail/CVE-2020-15212
- https://github.com/tensorflow/tensorflow/commit/00c7ed7ce81c2126ebc17dfe7073b5c0efd5ec0a
- https://github.com/tensorflow/tensorflow/commit/204945b19e44b57906c9344c0d00120eeeae178a
- https://github.com/tensorflow/tensorflow/commit/a4030d8ba3692c438997c27be2dd95f3d5f54827
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-292.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-327.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-135.yaml
- https://github.com/tensorflow/tensorflow
- https://github.com/tensorflow/tensorflow/blob/0e68f4d3295eb0281a517c3662f6698992b7b2cf/tensorflow/lite/kernels/internal/reference/reference_ops.h#L2625-L2631
- https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1
CVE-2020-15212 · published · modified · JSON
PyPI/tensorflow-cpu CVE-2020-15212: high 8.1
Out of bounds access in tensorflow-lite
Action: Upgrade tensorflow-cpu to 2.2.1 or later.
pip install tensorflow-cpu==2.2.1pip install tensorflow-cpu==2.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | 2.2.1 | - |
| 2.3.0 | 2.3.1 | - |
Fixed versions
| 2.2.1 | 2.3.1 |
Sources
- osv: GHSA-hx2x-85gr-wrpq#PyPI/tensorflow-cpu
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hx2x-85gr-wrpq
- https://nvd.nist.gov/vuln/detail/CVE-2020-15212
- https://github.com/tensorflow/tensorflow/commit/00c7ed7ce81c2126ebc17dfe7073b5c0efd5ec0a
- https://github.com/tensorflow/tensorflow/commit/204945b19e44b57906c9344c0d00120eeeae178a
- https://github.com/tensorflow/tensorflow/commit/a4030d8ba3692c438997c27be2dd95f3d5f54827
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-292.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-327.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-135.yaml
- https://github.com/tensorflow/tensorflow
- https://github.com/tensorflow/tensorflow/blob/0e68f4d3295eb0281a517c3662f6698992b7b2cf/tensorflow/lite/kernels/internal/reference/reference_ops.h#L2625-L2631
- https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1
CVE-2020-15212 · published · modified · JSON
PyPI/tensorflow-gpu CVE-2020-15212: high 8.1
Out of bounds access in tensorflow-lite
Action: Upgrade tensorflow-gpu to 2.2.1 or later.
pip install tensorflow-gpu==2.2.1pip install tensorflow-gpu==2.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | 2.2.1 | - |
| 2.3.0 | 2.3.1 | - |
Fixed versions
| 2.2.1 | 2.3.1 |
Sources
- osv: GHSA-hx2x-85gr-wrpq#PyPI/tensorflow-gpu
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hx2x-85gr-wrpq
- https://nvd.nist.gov/vuln/detail/CVE-2020-15212
- https://github.com/tensorflow/tensorflow/commit/00c7ed7ce81c2126ebc17dfe7073b5c0efd5ec0a
- https://github.com/tensorflow/tensorflow/commit/204945b19e44b57906c9344c0d00120eeeae178a
- https://github.com/tensorflow/tensorflow/commit/a4030d8ba3692c438997c27be2dd95f3d5f54827
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-292.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-327.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-135.yaml
- https://github.com/tensorflow/tensorflow
- https://github.com/tensorflow/tensorflow/blob/0e68f4d3295eb0281a517c3662f6698992b7b2cf/tensorflow/lite/kernels/internal/reference/reference_ops.h#L2625-L2631
- https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1
CVE-2020-15212 · published · modified · JSON
PyPI/tensorflow CVE-2020-15212: unknown
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger writes outside of bounds of heap allocated buffers by inserting negative elements in the segment ids tensor. Us
Action: Upgrade tensorflow to 2.2.1 or later.
pip install tensorflow==2.3.1pip install tensorflow==2.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | 2.2.1 | - |
| 2.3.0 | 2.3.1 | - |
Fixed versions
| 2.3.1 | 2.2.1 |
Sources
- osv: PYSEC-2020-135
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hx2x-85gr-wrpq
- https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1
- https://github.com/tensorflow/tensorflow/commit/204945b19e44b57906c9344c0d00120eeeae178a
CVE-2020-15212 · published · modified · JSON
PyPI/tensorflow-cpu CVE-2020-15212: unknown
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger writes outside of bounds of heap allocated buffers by inserting negative elements in the segment ids tensor. Us
Action: Upgrade tensorflow-cpu to 2.2.1 or later.
pip install tensorflow-cpu==2.3.1pip install tensorflow-cpu==2.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | 2.2.1 | - |
| 2.3.0 | 2.3.1 | - |
Fixed versions
| 2.3.1 | 2.2.1 |
Sources
- osv: PYSEC-2020-292
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hx2x-85gr-wrpq
- https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1
- https://github.com/tensorflow/tensorflow/commit/204945b19e44b57906c9344c0d00120eeeae178a
CVE-2020-15212 · published · modified · JSON
PyPI/tensorflow-gpu CVE-2020-15212: unknown
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger writes outside of bounds of heap allocated buffers by inserting negative elements in the segment ids tensor. Us
Action: Upgrade tensorflow-gpu to 2.2.1 or later.
pip install tensorflow-gpu==2.3.1pip install tensorflow-gpu==2.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | 2.2.1 | - |
| 2.3.0 | 2.3.1 | - |
Fixed versions
| 2.3.1 | 2.2.1 |
Sources
- osv: PYSEC-2020-327
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hx2x-85gr-wrpq
- https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1
- https://github.com/tensorflow/tensorflow/commit/204945b19e44b57906c9344c0d00120eeeae178a
CVE-2020-15212 · published · modified · JSON