Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
inservice apis directly to access/edit the application's configurations. To fix the potential issue without upgrading, simply follow the advice that do not expose apollo-adminservice to internet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ctripcorp/apollo/security/advisories/GHSA-xpmx-h7xq-xffh - https://github.com/ctripcorp/apollo/pull/3233/commits/ae9ba6cfd32ed80469f162e5e3583e2477862ddf
CVE ID: CVE-2020-15171 State: PUBLISHED Published: 2020-09-10T19:40:13 Last Updated: 2024-08-04T13:08:22.465Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: xwiki Products: xwiki-platform Problem Types: CWE-94 Description: In XWiki before versions 11.10.5 or 12.2.1, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instantiate arbitrary Java objects and invoke methods that may lead to arbitrary code execution. The only workaround is to give SCRIPT right only to trusted users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xw
RIPT right only to trusted users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-7qw5-pqhc-xm4g
CVE ID: CVE-2020-15172 State: PUBLISHED Published: 2020-09-15T18:45:13 Last Updated: 2024-08-04T13:08:22.395Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: zephyrkul Products: FluffyCogs Problem Types: CWE-502 Description: The Act module for Red Discord Bot before commit 6b9f3b86 is vulnerable to Remote Code Execution. With this exploit, Discord users can use specially crafted messages to perform destructive actions and/or access sensitive information. Unloading the Act module with `unload act` can render this exploit inaccessible. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zephyrkul/FluffyCogs/security/advisories/GHS
al Analyst Notes: - CVE Program Container: References: - https://github.com/zephyrkul/FluffyCogs/security/advisories/GHSA-rm7m-j4xp-rv2p - https://github.com/zephyrkul/FluffyCogs/commit/6b9f3b862e1f0a5429c62f3090f814e53a242347
CVE ID: CVE-2020-15173 State: PUBLISHED Published: 2020-09-09T22:45:13 Last Updated: 2024-08-04T13:08:22.404Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: accel-ppp Products: accel-ppp Problem Types: CWE-119 Description: In ACCEL-PPP (an implementation of PPTP/PPPoE/L2TP/SSTP), there is a buffer overflow when receiving an l2tp control packet ith an AVP which type is a string and no hidden flags, length set to less than 6. If your application is used in open networks or there are untrusted nodes in the network it is highly recommended to apply the patch. The problem was patched with commit 2324bcd5ba12cf28f47357a8f03cd41b7c04c52b As a workaround changes of c
ply the patch. The problem was patched with commit 2324bcd5ba12cf28f47357a8f03cd41b7c04c52b As a workaround changes of commit 2324bcd5ba12cf28f47357a8f03cd41b7c04c52b can be applied to older versions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/accel-ppp/accel-ppp/security/advisories/GHSA-rr68-fchr-69vf - https://github.com/accel-ppp/accel-ppp/commit/2324bcd5ba12cf28f47357a8f03cd41b7c04c52b
CVE ID: CVE-2020-15174 State: PUBLISHED Published: 2020-10-06T17:35:13 Last Updated: 2024-08-04T13:08:22.398Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L) Vendors: electron Products: electron Problem Types: CWE-693, CWE-20 Description: In Electron before versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 the `will-navigate` event that apps use to prevent navigations to unexpected destinations as per our security recommendations can be bypassed when a sub-frame performs a top-frame navigation across sites. The issue is patched in versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 As a workaround sandbox all your iframes using the sandbox attribute. This will prevent them cre
10.0.1, 9.3.0 or 8.5.1 As a workaround sandbox all your iframes using the sandbox attribute. This will prevent them creating top-frame navigations and is good practice anyway. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/electron/electron/security/advisories/GHSA-2q4g-w47c-4674 - https://github.com/electron/electron/commit/18613925610ba319da7f497b6deed85ad712c59b
CVE ID: CVE-2020-15175 State: PUBLISHED Published: 2020-10-07T18:45:14 Last Updated: 2024-08-04T13:08:22.417Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-552 Description: In GLPI before version 9.5.2, the `​pluginimage.send.php​` endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted to instead delete the .htaccess file for the files directory. Any user becomes able to read all the files and folders contained in “/files/”. Some of the sensitive information that is compromised are the user sessions, logs, and more. An attacker would be able to get the Administrators
ormation that is compromised are the user sessions, logs, and more. An attacker would be able to get the Administrators session token and use that to authenticate. The issue is patched in version 9.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-rm52-jx9h-rwcp - https://github.com/glpi-project/glpi/commit/6ca9a0e77299a755c356d758344a23278df67f65
CVE ID: CVE-2020-15176 State: PUBLISHED Published: 2020-10-07T18:55:12 Last Updated: 2024-08-04T13:08:22.468Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-89 Description: In GLPI before version 9.5.2, when supplying a back tick in input that gets put into a SQL query,the application does not escape or sanitize allowing for SQL Injection to occur. Leveraging this vulnerability an attacker is able to exfiltrate sensitive information like passwords, reset tokens, personal details, and more. The issue is patched in version 9.5.2 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glp
ssue is patched in version 9.5.2 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-x93w-64x9-58qw - https://github.com/glpi-project/glpi/commit/f021f1f365b4acea5066d3e57c6d22658cf32575
CVE ID: CVE-2020-15177 State: PUBLISHED Published: 2020-10-07T19:05:14 Last Updated: 2024-08-04T13:08:22.457Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: glpi-project Products: glpi Problem Types: CWE-79 Description: In GLPI before version 9.5.2, the `install/install.php` endpoint insecurely stores user input into the database as `url_base` and `url_base_api`. These settings are referenced throughout the application and allow for vulnerabilities like Cross-Site Scripting and Insecure Redirection Since authentication is not required to perform these changes,anyone could point these fields at malicious websites or form input in a way to trigger XSS. Leveraging
rm these changes,anyone could point these fields at malicious websites or form input in a way to trigger XSS. Leveraging JavaScript it's possible to steal cookies, perform actions as the user, etc. The issue is patched in version 9.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-prvh-9m4h-4m79 - https://github.com/glpi-project/glpi/commit/a8109d4ee970a222faf48cf48fae2d2f06465796
CVE ID: CVE-2020-15178 State: PUBLISHED Published: 2020-09-15T17:50:13 Last Updated: 2024-08-04T13:08:22.421Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: PrestaShop Products: contactform Problem Types: CWE-79 Description: In PrestaShop contactform module (prestashop/contactform) before version 4.3.0, an attacker is able to inject JavaScript while using the contact form. The `message` field was incorrectly unescaped, possibly allowing attackers to execute arbitrary JavaScript in a victim's browser. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PrestaShop/contactform/security/advisories/GHSA-95hx-62rh-gg96 - https://github
tainer: References: - https://github.com/PrestaShop/contactform/security/advisories/GHSA-95hx-62rh-gg96 - https://github.com/PrestaShop/contactform/commit/ecd9f5d14920ec00885766a7cb41bcc5ed8bfa09 - https://packagist.org/packages/prestashop/contactform
CVE ID: CVE-2020-15179 State: PUBLISHED Published: 2020-09-15T18:10:13 Last Updated: 2024-08-04T13:08:22.438Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: InternationalScratchWiki Products: wiki-scratchsig Problem Types: CWE-79 Description: The ScratchSig extension for MediaWiki before version 1.0.1 allows stored Cross-Site Scripting. Using <script> tag inside <scratchsig> tag, attackers with edit permission can execute scripts on visitors' browser. With MediaWiki JavaScript API, this can potentially lead to privilege escalation and/or account takeover. This has been patched in release 1.0.1. This has already been deployed to all Scratch Wikis. No workarounds
nt takeover. This has been patched in release 1.0.1. This has already been deployed to all Scratch Wikis. No workarounds exist other than disabling the extension completely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/InternationalScratchWiki/wiki-scratchsig/security/advisories/GHSA-gp9v-pg9f-vmp6 - https://github.com/InternationalScratchWiki/wiki-scratchsig/commit/4160a39a20eebeb63a59eb7597a91b961eca6388
CVE ID: CVE-2020-15180 State: PUBLISHED Published: 2021-05-27T19:45:28 Last Updated: 2024-08-04T13:08:22.425Z Vendors: n/a Products: mariadb Problem Types: CWE-20 Description: A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lt
5 and before 10.5.6. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2020/10/msg00021.html - https://www.debian.org/security/2020/dsa-4776 - https://security.gentoo.org/glsa/202011-14 - https://www.percona.com/blog/2020/10/30/cve-2020-15180-affects-percona-xtradb-cluster/ - https://bugzilla.redhat.com/show_bug.cgi?id=1894919
CVE ID: CVE-2020-15181 State: PUBLISHED Published: 2020-09-18T17:55:14 Last Updated: 2024-08-04T13:08:22.426Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: FlexSolution Products: AlfrescoResetPassword Problem Types: CWE-20, CWE-284 Description: The Alfresco Reset Password add-on before version 1.2.0 relies on untrusted inputs in a security decision. Intruders can get admin's access to the system using the vulnerability in the project. Impacts all servers where this add-on is installed. The problem is fixed in version 1.2.0 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FlexSolution/AlfrescoResetPassword/security/advis
alyst Notes: - CVE Program Container: References: - https://github.com/FlexSolution/AlfrescoResetPassword/security/advisories/GHSA-xrc8-fjp4-h4fv - https://github.com/FlexSolution/AlfrescoResetPassword/commit/5927b9651356c4cd952cb9b485292583d305b47c
CVE ID: CVE-2020-15182 State: PUBLISHED Published: 2020-09-17T19:20:15 Last Updated: 2024-08-04T13:08:22.487Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: inunosinsi Products: soycms Problem Types: CWE-22, CWE-352 Description: The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery (CSRF) and Remote Code Execution (RCE). The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially crafted webpage. An administrator must be logged in for exploitation to be possible. This issue is fixed in SOY Inquiry version 2.0.0.4 a
An administrator must be logged in for exploitation to be possible. This issue is fixed in SOY Inquiry version 2.0.0.4 and included in SOY CMS 3.0.2.328. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/inunosinsi/soycms/security/advisories/GHSA-j2qw-747j-mfv4 - https://youtu.be/ffvKH3gwyRE - https://github.com/inunosinsi/soycms/pull/15
CVE ID: CVE-2020-15183 State: PUBLISHED Published: 2020-09-17T20:10:13 Last Updated: 2024-08-04T13:08:22.471Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: inunosinsi Products: soycms Problem Types: CWE-79 Description: SoyCMS 3.0.2 and earlier is affected by Reflected Cross-Site Scripting (XSS) which leads to Remote Code Execution (RCE) from a known vulnerability. This allows remote attackers to force the administrator to edit files once the adminsitrator loads a specially crafted webpage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/inunosinsi/soycms/security/advisories/GHSA-33q6-4xmp-2f48 - https://github.com/inunosin
References: - https://github.com/inunosinsi/soycms/security/advisories/GHSA-33q6-4xmp-2f48 - https://github.com/inunosinsi/soycms/commit/045a222016f99b56557b0d8f39bbfc653d2c4707 - https://youtu.be/uAMAwH35ups
CVE ID: CVE-2020-15184 State: PUBLISHED Published: 2020-09-17T20:40:12 Last Updated: 2024-08-04T13:08:22.470Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: helm Products: helm Problem Types: CWE-20 Description: In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the `alias` field on a `Chart.yaml` is not properly sanitized. This could lead to the injection of unwanted information into a chart. This issue has been patched in Helm 3.3.2 and 2.16.11. A possible workaround is to manually review the `dependencies` field of any untrusted chart, verifying that the `alias` field is either not used, or (if used) does not contain newlines or path characte
sted chart, verifying that the `alias` field is either not used, or (if used) does not contain newlines or path characters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/helm/helm/security/advisories/GHSA-9vp5-m38w-j776 - https://github.com/helm/helm/commit/e7c281564d8306e1dcf8023d97f972449ad74850
CVE ID: CVE-2020-15185 State: PUBLISHED Published: 2020-09-17T21:30:13 Last Updated: 2024-08-04T13:08:22.474Z Severity: LOW (CVSS 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: helm Products: helm Problem Types: CWE-694, CWE-74 Description: In Helm before versions 2.16.11 and 3.3.2, a Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compromised, this lowers the level of access that an attacker needs to inject a bad chart into a repository. To perform this attack, an attacker must have write access to the index file (which can occur during a MITM attack on a non-SSL connection). This issue has been patched in Helm 3.3.2 an
index file (which can occur during a MITM attack on a non-SSL connection). This issue has been patched in Helm 3.3.2 and 2.16.11. A possible workaround is to manually review the index file in the Helm repository cache before installing software. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/helm/helm/security/advisories/GHSA-jm56-5h66-w453 - https://github.com/helm/helm/commit/055dd41cbe53ce131ab0357524a7f6729e6e40dc
CVE ID: CVE-2020-15186 State: PUBLISHED Published: 2020-09-17T21:40:13 Last Updated: 2024-08-04T13:08:22.480Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: helm Products: helm Problem Types: CWE-20 Description: In Helm before versions 2.16.11 and 3.3.2 plugin names are not sanitized properly. As a result, a malicious plugin author could use characters in a plugin name that would result in unexpected behavior, such as duplicating the name of another plugin or spoofing the output to `helm --help`. This issue has been patched in Helm 3.3.2. A possible workaround is to not install untrusted Helm plugins. Examine the `name` field in the `plugin.yaml` file for a pl
ossible workaround is to not install untrusted Helm plugins. Examine the `name` field in the `plugin.yaml` file for a plugin, looking for characters outside of the [a-zA-Z0-9._-] range. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/helm/helm/security/advisories/GHSA-m54r-vrmv-hw33 - https://github.com/helm/helm/commit/809e2d999e2c33e20e77f6bff30652d79c287542
CVE ID: CVE-2020-15187 State: PUBLISHED Published: 2020-09-17T21:50:12 Last Updated: 2025-05-29T22:59:03.267Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: helm Products: helm Problem Types: CWE-694, CWE-74 Description: In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, this lowers the level of access that an attacker needs to modify a plugin's install hooks, causing a local execution attack. To perform this attack, an attacker must have write access to the git repository or plugin archive (.tgz) while being downloaded (which can occur during a MITM attack
write access to the git repository or plugin archive (.tgz) while being downloaded (which can occur during a MITM attack on a non-SSL connection). This issue has been patched in Helm 2.16.11 and Helm 3.3.2. As a possible workaround make sure to install plugins using a secure connection protocol like SSL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/helm/helm/security/advisories/GHSA-c52f-pq47-2r9j - https://github.com/helm/helm/commit/6aab63765f99050b115f0aec3d6350c85e8da946 - https://github.com/helm/helm/commit/ac7c07c37d87e09797f714fb57aa5e9cb99d9450 - https://github.com/helm/helm/commit/b0296c0522e837d65f944beefa3fb64fd08ac304 - https://github.com/he
b57aa5e9cb99d9450 - https://github.com/helm/helm/commit/b0296c0522e837d65f944beefa3fb64fd08ac304 - https://github.com/helm/helm/commit/c8d6b01d72c9604e43ee70d0d78fadd54c2d8499 - https://github.com/helm/helm/commit/d9ef5ce8bad512e325390c0011be1244b8380e4b - https://github.com/helm/helm/commit/f2ede29480b507b7d8bb152dd8b6b86248b00658
CVE ID: CVE-2020-15188 State: PUBLISHED Published: 2020-09-18T17:05:18 Last Updated: 2024-08-04T13:08:22.678Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: inunosinsi Products: soycms Problem Types: CWE-502 Description: SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution (RCE). The allows remote attackers to execute any arbitrary code when the inquiry form feature is enabled by the service. The vulnerability is caused by unserializing the form without any restrictions. This was fixed in 3.0.2.328. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/inunosinsi/soycms/security/advisories/GHSA-hr
l Analyst Notes: - CVE Program Container: References: - https://github.com/inunosinsi/soycms/security/advisories/GHSA-hrrx-m22r-p9jp - https://github.com/inunosinsi/soycms/issues/10 - https://github.com/inunosinsi/soycms/pull/12/commits/a75642989132dd25f74a13194b27c0986c3de020 - https://www.youtube.com/watch?v=zAE4Swjc-GU&feature=youtu.be
CVE ID: CVE-2020-15189 State: PUBLISHED Published: 2020-09-18T17:20:16 Last Updated: 2024-08-04T13:08:22.649Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: inunosinsi Products: soycms Problem Types: CWE-434 Description: SOY CMS 3.0.2 and earlier is affected by Remote Code Execution (RCE) using Unrestricted File Upload. Cross-Site Scripting(XSS) vulnerability that was used in CVE-2020-15183 can be used to increase impact by redirecting the administrator to access a specially crafted page. This vulnerability is caused by insecure configuration in elFinder. This is fixed in version 3.0.2.328. Additional Analyst Notes: - CVE Program Container: References: - ht
ion in elFinder. This is fixed in version 3.0.2.328. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/inunosinsi/soycms/security/advisories/GHSA-6r2f-p68g-m433 - https://github.com/inunosinsi/soycms/issues/9 - https://github.com/inunosinsi/soycms/pull/14 - https://github.com/inunosinsi/soycms/pull/14/commits/e4ef00677ed52f9e5a5fcfcb56b797f5412b5d59 - https://youtu.be/FWIDFNXmr9g
CVE ID: CVE-2020-15190 State: PUBLISHED Published: 2020-09-25T18:35:13 Last Updated: 2024-08-04T13:08:22.683Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: tensorflow Products: tensorflow Problem Types: CWE-20, CWE-476 Description: In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `tf.raw_ops.Switch` operation takes as input a tensor and a boolean and outputs two tensors. Depending on the boolean value, one of the tensors is exactly the input tensor whereas the other one should be an empty tensor. However, the eager runtime traverses all tensors in the output. Since only one of the tensors is defined, the other one is `nullptr`, henc
runtime traverses all tensors in the output. Since only one of the tensors is defined, the other one is `nullptr`, hence we are binding a reference to `nullptr`. This is undefined behavior and reported as an error if compiling with `-fsanitize=null`. In this case, this results in a segmentation fault The issue is patched in commit da8558533d925694483d2c136a9220d6d49d843c, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4g9f-63rx-5cw4 - https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 - https://github.com/tensorflow/tenso
GHSA-4g9f-63rx-5cw4 - https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 - https://github.com/tensorflow/tensorflow/commit/da8558533d925694483d2c136a9220d6d49d843c - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html
CVE ID: CVE-2020-15191 State: PUBLISHED Published: 2020-09-25T18:41:01 Last Updated: 2024-08-04T13:08:22.683Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: tensorflow Products: tensorflow Problem Types: CWE-20, CWE-476 Description: In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes an invalid argument to `dlpack.to_dlpack` the expected validations will cause variables to bind to `nullptr` while setting a `status` variable to the error condition. However, this `status` argument is not properly checked. Hence, code following these methods will bind references to null pointers. This is undefined behavior and reported as an error if compiling with
ese methods will bind references to null pointers. This is undefined behavior and reported as an error if compiling with `-fsanitize=null`. The issue is patched in commit 22e07fb204386768e5bcbea563641ea11f96ceb8 and is released in TensorFlow versions 2.2.1, or 2.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 - https://github.com/tensorflow/tensorflow/commit/22e07fb204386768e5bcbea563641ea11f96ceb8 - https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q8qj-fc9q-cphr - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html