title: Denial of Service in Tensorflow
description: In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `fill` argument of tf.strings.as_string, a malicious attacker is able to trigger a format string vulnerability due to the way the internal format use in a `printf` call is constructed. This may result in segmentation fault. The issue is patched in commit 33be22c65d86256e6826666662e40dbdfe70ee83, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.
problem types: {"CWE-20":"Improper Input Validation"}
affected:
{
product: tensorflow
vendor: tensorflow
versions:
status: affected, version: < 1.15.4
status: affected, version: >= 2.0.0, < 2.0.3
status: affected, version: >= 2.1.0, < 2.1.2
status: affected, version: >= 2.2.0, < 2.2.1
status: affected, version: >= 2.3.0, < 2.3.1
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]