GHSA-844w-j86r-4x2j

Suggest an improvement
Source
https://github.com/advisories/GHSA-844w-j86r-4x2j
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/12/GHSA-844w-j86r-4x2j/GHSA-844w-j86r-4x2j.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-844w-j86r-4x2j
Aliases
Related
Published
2019-12-16T20:17:10Z
Modified
2024-10-28T15:13:15.497159Z
Severity
  • 2.6 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L CVSS Calculator
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow
Details

Impact

A heap buffer overflow in UnsortedSegmentSum can be produced when the Index template argument is int32. In this case data_size and num_segments fields are truncated from int64 to int32 and can produce negative numbers, resulting in accessing out of bounds heap memory.

This is unlikely to be exploitable and was detected and fixed internally. We are making the security advisory only to notify users that it is better to update to TensorFlow 1.15 or 2.0 or later as these versions already have this fixed.

Patches

Patched by db4f9717c41bccc3ce10099ab61996b246099892 and released in all official releases after 1.15 and 2.0.

For more information

Please consult <code>SECURITY.md</code> for more information regarding the security model and how to contact us with issues and questions.

Database specific 
{
    "nvd_published_at": "2019-12-16T21:15:00Z",
    "severity": "LOW",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-122",
        "CWE-681"
    ],
    "github_reviewed_at": "2019-12-16T20:16:12Z"
}
References

Affected packages

PyPI / tensorflow

Package

Name
tensorflow
View open source insights on deps.dev
Purl
pkg:pypi/tensorflow

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.15.0

Affected versions

0.*

0.12.0
0.12.1

1.*

1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.4.1
1.5.0
1.5.1
1.6.0
1.7.0
1.7.1
1.8.0
1.9.0
1.10.0
1.10.1
1.11.0
1.12.0
1.12.2
1.12.3
1.13.1
1.13.2
1.14.0

PyPI / tensorflow-cpu

Package

Name
tensorflow-cpu
View open source insights on deps.dev
Purl
pkg:pypi/tensorflow-cpu

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.15.0

PyPI / tensorflow-gpu

Package

Name
tensorflow-gpu
View open source insights on deps.dev
Purl
pkg:pypi/tensorflow-gpu

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.15.0

Affected versions

0.*

0.12.0
0.12.1

1.*

1.0.0
1.0.1
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.4.1
1.5.0
1.5.1
1.6.0
1.7.0
1.7.1
1.8.0
1.9.0
1.10.0
1.10.1
1.11.0
1.12.0
1.12.2
1.12.3
1.13.1
1.13.2
1.14.0