Lucene search
Veracode Vulnerability DatabaseVERACODE:27253HistorySep 28, 2020 - 2:05 a.m.
Arbitrary Code Execution
2020-09-2802:05:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.002 Low
EPSS
Percentile
51.5%
tensorflow is vulnerable to arbitrary code execution. The vulnerability exists through a memory corruption issue in the implementation of dlpack.to_dlpack, as the pybind11 does not restrict Python objects to be parsed and casted.
References
lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html
github.com/advisories/GHSA-rjjg-hgv6-h69v
github.com/tensorflow/tensorflow/commit/22e07fb204386768e5bcbea563641ea11f96ceb8
github.com/tensorflow/tensorflow/releases/tag/v2.3.1
github.com/tensorflow/tensorflow/security/advisories/GHSA-rjjg-hgv6-h69v
Related
cvelist
cvelist
CVE-2020-15193 Memory corruption in Tensorflow
2020-09-25 18:40:51
osv
osv
prion
prion
Memory corruption
2020-09-25 19:15:00
nvd
nvd
CVE-2020-15193
2020-09-25 19:15:14
cve
cve
CVE-2020-15193
2020-09-25 19:15:14
github
github
Memory corruption in Tensorflow
2020-09-25 18:28:27
suse
suse
Security update for tensorflow2 (moderate)
2020-10-29 00:00:00
nessus
nessus
openSUSE Security Update : tensorflow2 (openSUSE-2020-1766)
2020-10-30 00:00:00
openvas
openvas
openSUSE: Security Advisory for tensorflow2 (openSUSE-SU-2020:1766-1)
2020-10-30 00:00:00
