deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-17145
Published: 2020-12-10
Description: Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
CVSS Score: 5.4 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17145; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17145
CVE: CVE-2020-17147
Published: 2020-12-10
Description: Dynamics CRM Webclient Cross-site Scripting Vulnerability
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17147; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17147
CVE: CVE-2020-17148
Published: 2020-12-10
Description: Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17148; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17148
CVE: CVE-2020-17150
Published: 2020-12-10
Description: Visual Studio Code Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17150; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17150
CVE: CVE-2020-17152
Published: 2020-12-10
Description: Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17152; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17152
CVE: CVE-2020-17153
Published: 2020-12-10
Description: Microsoft Edge for Android Spoofing Vulnerability
CVSS Score: 4.3 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17153; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17153
CVE: CVE-2020-17156
Published: 2020-12-10
Description: Visual Studio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17156; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17156
CVE: CVE-2020-17158
Published: 2020-12-10
Description: Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17158; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17158
CVE: CVE-2020-17159
Published: 2020-12-10
Description: Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17159; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17159
CVE: CVE-2020-17160
Published: 2020-12-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2020-7339
Published: 2020-12-10
Description: Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allow an attacker on the same local network to potentially intercept communication between the Server and Sensors.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10340; https://kc.mcafee.com/corporate/index?page=content&id=SB10340
CVE: CVE-2020-12516
Published: 2020-12-10
Description: Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://cert.vde.com/en-us/advisories/vde-2020-042; https://us-cert.cisa.gov/ics/advisories/icsa-20-308-01; https://cert.vde.com/en-us/advisories/vde-2020-042
CVE: CVE-2019-7198
Published: 2020-12-10
Description: This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS 4.4.3.1354 build 20200702 and later
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-78, CWE-77
References: https://www.qnap.com/en/security-advisory/qsa-20-16; https://www.qnap.com/en/security-advisory/qsa-20-16
CVE: CVE-2020-27350
Published: 2020-12-10
Description: APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. This issue affects: apt 1.2.32ubuntu0 versions prior to 1.2.32ubuntu0.2; 1.6.12ubuntu0 versions prior to 1.6.12ubuntu0.2; 2.0.2ubuntu0 versions prior to 2.0.2ubuntu0.2; 2.1.10ubuntu0 versions prior to 2.1.10ubuntu0.1;
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://bugs.launchpad.net/bugs/1899193; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://usn.ubuntu.com/usn/usn-4667-1
CVE: CVE-2020-27351
Published: 2020-12-10
Description: Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.cc, aka GHSL-2020-170. This issue affects: python-apt 1.1.0~beta1 versions prior to 1.1.0~beta1ubuntu0.16.04.10; 1.6.5ubuntu0 versions prior to 1.6.5ubuntu0.4; 2.0.0ubuntu0 versions prior to 2.0.0ubuntu0.20.04.2; 2.1.3ubuntu1 versions prior to 2.1.3ubuntu1.1;
CVSS Score: 2.0 (LOW)
CWE: CWE-772, CWE-772
References: https://bugs.launchpad.net/bugs/1899193; https://usn.ubuntu.com/usn/usn-4668-1; https://www.debian.org/security/2020/dsa-4809
CVE: CVE-2020-2491
Published: 2020-12-10
Description: This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. QTS 4.5.1: Photo Station 6.0.12 and later QTS 4.4.3: Photo Station 6.0.12 and later QTS 4.3.6: Photo Station 5.7.12 and later QTS 4.3.4: Photo Station 5.7.13 and later QTS 4.3.3: Photo Station 5.4.10 and later QTS 4.2.6: Photo Station 5.2.11 and later
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-79
References: https://www.qnap.com/en/security-advisory/qsa-20-15; https://www.qnap.com/en/security-advisory/qsa-20-15
CVE: CVE-2020-2493
Published: 2020-12-10
Description: This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in Multimedia Console 1.1.5 and later.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-79
References: https://www.qnap.com/en/security-advisory/qsa-20-14; https://www.qnap.com/en/security-advisory/qsa-20-14
CVE: CVE-2020-2494
Published: 2020-12-10
Description: This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in the following versions of Music Station. QuTS hero h4.5.1: Music Station 5.3.13 and later QTS 4.5.1: Music Station 5.3.12 and later QTS 4.4.3: Music Station 5.3.12 and later
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-79
References: https://www.qnap.com/en/security-advisory/qsa-20-13; https://www.qnap.com/en/security-advisory/qsa-20-13
CVE: CVE-2020-2495
Published: 2020-12-10
Description: If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS 4.4.3.1354 build 20200702 and later QTS 4.3.6.1333 build 20200608 and later QTS 4.3.4.1368 build 20200703 and later QTS 4.3.3.1315 build 20200611 and later QTS 4.2.6 build 20200611 and later
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-79
References: https://www.qnap.com/en/security-advisory/qsa-20-12; https://www.qnap.com/en/security-advisory/qsa-20-12
CVE: CVE-2020-2496
Published: 2020-12-10
Description: If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS 4.4.3.1354 build 20200702 and later QTS 4.3.6.1333 build 20200608 and later QTS 4.3.4.1368 build 20200703 and later QTS 4.3.3.1315 build 20200611 and later QTS 4.2.6 build 20200611 and later
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-79
References: https://www.qnap.com/en/security-advisory/qsa-20-12; https://www.qnap.com/en/security-advisory/qsa-20-12
CVE: CVE-2020-2497
Published: 2020-12-10
Description: If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in System Connection Logs. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS 4.4.3.1354 build 20200702 and later QTS 4.3.6.1333 build 20200608 and later QTS 4.3.4.1368 build 20200703 and later QTS 4.3.3.1315 build 20200611 and later QTS 4.2.6 build 20200611 and later
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-79
References: https://www.qnap.com/en/security-advisory/qsa-20-12; https://www.qnap.com/en/security-advisory/qsa-20-12
CVE: CVE-2020-2498
Published: 2020-12-10
Description: If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in certificate configuration. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS 4.4.3.1354 build 20200702 and later QTS 4.3.6.1333 build 20200608 and later QTS 4.3.4.1368 build 20200703 and later QTS 4.3.3.1315 build 20200611 and later QTS 4.2.6 build 20200611 and later
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-80, CWE-79
References: https://www.qnap.com/en/security-advisory/qsa-20-12; https://www.qnap.com/en/security-advisory/qsa-20-12
CVE: CVE-2020-12594
Published: 2020-12-10
Description: A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 10.7.4.
CVSS Score: 7.2 (HIGH)
References: https://support.broadcom.com/security-advisory/content/security-advisories/Privilege-Escalation-and-Information-Disclosure-Vulnerabilities-in-SMG/SYMSA16609; https://support.broadcom.com/security-advisory/content/security-advisories/Privilege-Escalation-and-Information-Disclosure-Vulnerabilities-in-SMG/SYMSA16609
CVE: CVE-2020-12595
Published: 2020-12-10
Description: An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4.
CVSS Score: 4.9 (MEDIUM)
References: https://support.broadcom.com/security-advisory/content/security-advisories/Privilege-Escalation-and-Information-Disclosure-Vulnerabilities-in-SMG/SYMSA16609; https://support.broadcom.com/security-advisory/content/security-advisories/Privilege-Escalation-and-Information-Disclosure-Vulnerabilities-in-SMG/SYMSA16609
CVE: CVE-2020-24444
Published: 2020-12-10
Description: AEM Forms SP6 add-on for AEM 6.5.6.0 and Forms add-on package for AEM 6.4 Service Pack 8 Cumulative Fix Pack 2 (6.4.8.2) have a blind Server-Side Request Forgery (SSRF) vulnerability. This vulnerability could be exploited by an unauthenticated attacker to gather information about internal systems that reside on the same network.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-918
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-72.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-72.html
CVE: CVE-2020-24445
Published: 2020-12-10
Description: AEM's Cloud Service offering, as well as version 6.5.6.0 (and below), are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb20-72.html; https://helpx.adobe.com/security/products/experience-manager/apsb20-72.html
CVE: CVE-2020-26407
Published: 2020-12-10
Description: A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to perform cross-site scripting to other users via importing a malicious project
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-26407.json; https://gitlab.com/gitlab-org/gitlab/-/issues/212630; https://hackerone.com/reports/832117
CVE: CVE-2020-29668
Published: 2020-12-10
Description: Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired cookie) as the cookie value to authenticateAndRun.
CVSS Score: 3.7 (LOW)
CWE: CWE-287, CWE-565
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976020; https://github.com/sympa-community/sympa/blob/6.2.59b.2/NEWS.md; https://github.com/sympa-community/sympa/issues/1041
CVE: CVE-2020-29666
Published: 2020-12-10
Description: In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory-listing vulnerability, a remote attacker can view log files, located in /websocket/logs/, that contain a user's cookie values and the predefined developer's cookie value.
CVSS Score: 5.3 (MEDIUM)
References: http://lanatmservice.ru/; https://github.com/jet-pentest/CVE-2020-29666; http://lanatmservice.ru/
CVE: CVE-2020-29667
Published: 2020-12-10
Description: In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system because of Insufficient Session Expiration.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: http://lanatmservice.ru/; https://github.com/jet-pentest/CVE-2020-29667; http://lanatmservice.ru/
CVE: CVE-2020-8919
Published: 2020-12-10
Description: An information leak vulnerability exists in Gerrit versions prior to 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where a missing access check on the branch REST API allows an attacker with only the default set of priviledges to read all other user's personal account data as well as sub-trees with restricted access.
CVSS Score: 3.5 (LOW)
CWE: CWE-285, CWE-863
References: https://gerrit.googlesource.com/gerrit/+/0532fb876cb86bc091a91f78e6f28fff9e39ca65; https://www.gerritcodereview.com/2.15.html#21521; https://www.gerritcodereview.com/2.16.html#21625
CVE: CVE-2020-8920
Published: 2020-12-10
Description: An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verification of access on All-Users repositories, allowing an attacker to get read access to all users' personal information associated with their accounts.
CVSS Score: 3.5 (LOW)
CWE: CWE-285
References: https://gerrit.googlesource.com/gerrit/+/45071d6977932bca5a1427c8abad24710fed2e33; https://www.gerritcodereview.com/2.14.html#21422; https://www.gerritcodereview.com/2.15.html#21521
CVE: CVE-2020-26271
Published: 2020-12-10
Description: In affected versions of TensorFlow under certain cases, loading a saved model can result in accessing uninitialized memory while building the computation graph. The MakeEdge function creates an edge between one output tensor of the src node (given by output_index) and the input slot of the dst node (given by input_index). This is only possible if the types of the tensors on both sides coincide, so the function begins by obtaining the corresponding DataType values and comparing these for equality. However, there is no check that the indices point to inside of the arrays they index into. Thus, this can result in accessing data out of bounds of the corresponding heap allocated arrays. In most scenarios, this can manifest as unitialized data access, but if the index points far away from the boundaries of the arrays this can be used to leak addresses from the library. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125, CWE-908
References: https://github.com/tensorflow/tensorflow/commit/0cc38aaa4064fd9e79101994ce9872c6d91f816b; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-q263-fvxm-m5mw; https://github.com/tensorflow/tensorflow/commit/0cc38aaa4064fd9e79101994ce9872c6d91f816b
CVE: CVE-2016-15001
Published: 2020-12-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2019-4738
Published: 2020-12-10
Description: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/172753; https://www.ibm.com/support/pages/node/6380390; https://exchange.xforce.ibmcloud.com/vulnerabilities/172753
CVE: CVE-2020-13526
Published: 2020-12-10
Description: SQL injection vulnerability exists in the handling of sort parameters in ProcessMaker 3.4.11. A specially crafted HTTP request can cause an SQL injection. The reportTables_Ajax and clientSetupAjax pages are vulnerable to SQL injection in the sort parameter.An attacker can make an authenticated HTTP request to trigger these vulnerabilities.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1126; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1126
CVE: CVE-2020-16196
Published: 2020-12-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-16608
Published: 2020-12-10
Description: Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true).
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/notable/notable; https://sghosh2402.medium.com/cve-2020-16608-8cdad9f4d9b4; https://github.com/notable/notable
CVE: CVE-2020-19142
Published: 2020-12-10
Description: iCMS 7 attackers to execute arbitrary OS commands via shell metacharacters in the DB_PREFIX parameter to install/install.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/idreamsoft/iCMS/issues/65; https://github.com/idreamsoft/iCMS/issues/65
CVE: CVE-2020-19527
Published: 2020-12-10
Description: iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/idreamsoft/iCMS/issues/66; https://github.com/idreamsoft/iCMS/issues/66
CVE: CVE-2020-25967
Published: 2020-12-10
Description: The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://www.cnpanda.net/codeaudit/777.html; https://www.cnpanda.net/codeaudit/777.html
CVE: CVE-2020-26201
Published: 2020-12-10
Description: Askey AP5100W_Dual_SIG_1.01.097 and all prior versions use a weak password at the Operating System (rlx-linux) level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://medium.com/csg-govtech/bolstering-security-how-i-breached-a-wifi-mesh-access-point-from-close-proximity-to-uncover-f8f77dc3cd5d; https://www.askey.com.tw/; https://www.askey.com.tw/incident_report_notifications.html
CVE: CVE-2020-26266
Published: 2020-12-10
Description: In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code execution. This is caused by having tensor buffers be filled with the default value of the type but forgetting to default initialize the quantized floating point types in Eigen. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-908, CWE-908
References: https://github.com/tensorflow/tensorflow/commit/ace0c15a22f7f054abcc1f53eabbcb0a1239a9e2; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qhxx-j73r-qpm2; https://github.com/tensorflow/tensorflow/commit/ace0c15a22f7f054abcc1f53eabbcb0a1239a9e2
CVE: CVE-2020-26267
Published: 2020-12-10
Description: In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not validate the src_format and dst_format attributes. The code assumes that these two arguments define a permutation of NHWC. This can result in uninitialized memory accesses, read outside of bounds and even crashes. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://github.com/tensorflow/tensorflow/commit/ebc70b7a592420d3d2f359e4b1694c236b82c7ae; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-c9f3-9wfr-wgh7; https://github.com/tensorflow/tensorflow/commit/ebc70b7a592420d3d2f359e4b1694c236b82c7ae
CVE: CVE-2020-26268
Published: 2020-12-10
Description: In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a constant tensor created from a memory mapped file which is assumed immutable. However, if the type of the tensor is not an integral type, the operation crashes the Python interpreter as it tries to write to the memory area. If the file is too small, TensorFlow properly returns an error as the memory area has fewer bytes than what is needed for the tensor it creates. However, as soon as there are enough bytes, the above snippet causes a segmentation fault. This is because the allocator used to return the buffer data is not marked as returning an opaque handle since the needed virtual method is not overridden. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-471
References: https://github.com/tensorflow/tensorflow/commit/c1e1fc899ad5f8c725dcbb[PII_REDACTED]b5060bc7; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hhvc-g5hv-48c6; https://github.com/tensorflow/tensorflow/commit/c1e1fc899ad5f8c725dcbb[PII_REDACTED]b5060bc7
CVE: CVE-2020-26269
Published: 2020-12-10
Description: In TensorFlow release candidate versions 2.4.0rc*, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories. There are multiple invariants and preconditions that are assumed by the parallel implementation of GetMatchingPaths but are not verified by the PRs introducing it (#40861 and #44310). Thus, we are completely rewriting the implementation to fully specify and validate these. This is patched in version 2.4.0. This issue only impacts master branch and the release candidates for TF version 2.4. The final release of the 2.4 release will be patched.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/tensorflow/tensorflow/commit/8b5b9dc96666a3a5d27fad7179ff215e3b74b67c; https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9jjw-hf72-3mxw; https://github.com/tensorflow/tensorflow/commit/8b5b9dc96666a3a5d27fad7179ff215e3b74b67c