CVE-2020-15199

Advisory

Tensorflow-rocm 2.3.1 includes a fix for CVE-2020-15199: In Tensorflow before version 2.3.1, the "RaggedCountSparseOutput" does not validate that the input arguments form a valid ragged tensor. In particular, there is no validation that the "splits" tensor has the minimum required number of elements. Code uses this quantity to initialize a different data structure. Since "BatchedMap" is equivalent to a vector, it needs to have at least one element to not be "nullptr". If user passes a "splits" tensor that is empty or has exactly one element, we get a "SIGABRT" signal raised by the operating system. The issue was patched in commit 3cbb917b4714766030b28eba9fb41bb97ce9ee02.
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x5cp-9pcf-pp3h

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15199
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-x5cp-9pcf-pp3h
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1
• https://github.com/tensorflow/tensorflow/commit/3cbb917b4714766030b28eba9fb41bb97ce9ee02