Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-15199

Опубликовано: 25 сент. 2020
Источник: nvd
CVSS3: 5.9
CVSS2: 4.3
EPSS Низкий

Описание

In Tensorflow before version 2.3.1, the RaggedCountSparseOutput does not validate that the input arguments form a valid ragged tensor. In particular, there is no validation that the splits tensor has the minimum required number of elements. Code uses this quantity to initialize a different data structure. Since BatchedMap is equivalent to a vector, it needs to have at least one element to not be nullptr. If user passes a splits tensor that is empty or has exactly one element, we get a SIGABRT signal raised by the operating system. The issue is patched in commit 3cbb917b4714766030b28eba9fb41bb97ce9ee02 and is released in TensorFlow version 2.3.1.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:tensorflow:2.3.0:*:*:*:-:*:*:*

EPSS

Процентиль: 47%
0.00239
Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20
CWE-20

Связанные уязвимости

CVSS3: 5.9
debian
больше 5 лет назад

In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` does ...

CVSS3: 5.9
github
больше 5 лет назад

Denial of Service in Tensorflow

EPSS

Процентиль: 47%
0.00239
Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20
CWE-20