Segfault in Tensorflow

🗓️ 25 Sep 2020 18:28:14Reported by GitHub Advisory DatabaseType

Segfault in Tensorflow due to tf.raw_ops.Switch operation input issue. Patched in da8558533d925694483d2c136a9220d6d49d843c. Upgrade to TensorFlow 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1 recommended

Reporter	Title	Published	Views	Family All 68
IBM Security Bulletins	Security Bulletin: Tensor Flow security vulnerabilities with denial of service on IBM Watson Machine Learning on CP4D	3 May 202115:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in TensorFlow	9 Dec 202004:43	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2020-15190 for Tensorflow in Watson Machine Learning Community Edition	26 Oct 202016:54	–	ibm
IBM Security Bulletins	Security Bulletin: Tensor Flow security vulnerabilities with denial of service on IBM Watson Machine Learning Server	3 May 202115:06	–	ibm
CVE	CVE-2020-15190	25 Sep 202018:35	–	cve
Cvelist	CVE-2020-15190 Segfault in Tensorflow	25 Sep 202018:35	–	cvelist
Debian CVE	CVE-2020-15190	25 Sep 202018:35	–	debiancve
EUVD	EUVD-2020-0186	7 Oct 202500:30	–	euvd
NVD	CVE-2020-15190	25 Sep 202019:15	–	nvd
Tenable Nessus	openSUSE Security Update : tensorflow2 (openSUSE-2020-1766)	30 Oct 202000:00	–	nessus

Vulners

Node

tensorflow-gpupip

tensorflow-gpuRange2.1.0–2.1.2pip

tensorflow-gpuRange2.0.0–2.0.3pip

tensorflow-gpuRange<1.15.4pip

tensorflow-cpupip

tensorflow-cpuRange2.1.0–2.1.2pip

tensorflow-cpuRange2.0.0–2.0.3pip

tensorflow-cpuRange<1.15.4pip

tensorflow tensorflowMatch2.3.0pip

tensorflow tensorflowMatch2.2.0pip

tensorflow tensorflowRange2.1.0–2.1.2pip

tensorflow tensorflowRange2.0.0–2.0.3pip

tensorflow tensorflowRange<1.15.4pip

Source	Link
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-4g9f-63rx-5cw4
github	www.github.com/tensorflow/tensorflow/commit/da8558533d925694483d2c136a9220d6d49d843c
github	www.github.com/tensorflow/tensorflow/releases/tag/v2.3.1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-15190
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-270.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-305.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-113.yaml
github	www.github.com/advisories/GHSA-4g9f-63rx-5cw4

28 Oct 2024 20:05Current

1.2Low risk

Vulners AI Score1.2

CVSS 25

CVSS 3.15.3

EPSS0.00189