CVE-2020-15199CWE-20

Denial of Service in Tensorflow

Medium · published September 25, 2020

CVSS v3.1
5.9
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` does not validate that the input arguments form a valid ragged tensor. In particular, there is no validation that the `splits` tensor has the minimum required number of elements. Code uses this quantity to initialize a different data structure. Since `BatchedMap` is equivalent to a vector, it needs to have at least one element to not be `nullptr`. If user passes a `splits` tensor that is empty or has exactly one element, we get a `SIGABRT` signal raised by the operating system. The issue is patched in commit 3cbb917b4714766030b28eba9fb41bb97ce9ee02 and is released in TensorFlow version 2.3.1.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00812 · 56.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-09-25T18:40Z
EPSS history
Timeline
  • 25 SEP 18:40Z
    Denial of Service in Tensorflow
    cvelistv5