Oval Definition:oval:org.opensuse.security:def:202015192
Revision Date:2022-05-22Version:1
Title:CVE-2020-15192
Description:

In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to `dlpack.to_dlpack` there is a memory leak following an expected validation failure. The issue occurs because the `status` argument during validation failures is not properly checked. Since each of the above methods can return an error status, the `status` value must be checked before continuing. The issue is patched in commit 22e07fb204386768e5bcbea563641ea11f96ceb8 and is released in TensorFlow versions 2.2.1, or 2.3.1.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2020-15192
openSUSE-SU-2020:1766-1
Mitre CVE-2020-15192
SUSE CVE-2020-15192
openSUSE-SU-2020:1766-1
Platform(s):openSUSE Leap 15.2
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • libtensorflow2-2.1.2-lp152.7.3.1 is installed
  • AND libtensorflow2 is signed with openSUSE key
  • OR
  • libtensorflow2-gnu-hpc-2.1.2-lp152.7.3.1 is installed
  • AND libtensorflow2-gnu-hpc is signed with openSUSE key
  • OR
  • libtensorflow2-gnu-openmpi2-hpc-2.1.2-lp152.7.3.1 is installed
  • AND libtensorflow2-gnu-openmpi2-hpc is signed with openSUSE key
  • OR
  • libtensorflow_cc2-2.1.2-lp152.7.3.1 is installed
  • AND libtensorflow_cc2 is signed with openSUSE key
  • OR
  • libtensorflow_cc2-gnu-hpc-2.1.2-lp152.7.3.1 is installed
  • AND libtensorflow_cc2-gnu-hpc is signed with openSUSE key
  • OR
  • libtensorflow_cc2-gnu-openmpi2-hpc-2.1.2-lp152.7.3.1 is installed
  • AND libtensorflow_cc2-gnu-openmpi2-hpc is signed with openSUSE key
  • OR
  • libtensorflow_framework2-2.1.2-lp152.7.3.1 is installed
  • AND libtensorflow_framework2 is signed with openSUSE key
  • OR
  • libtensorflow_framework2-gnu-hpc-2.1.2-lp152.7.3.1 is installed
  • AND libtensorflow_framework2-gnu-hpc is signed with openSUSE key
  • OR
  • libtensorflow_framework2-gnu-openmpi2-hpc-2.1.2-lp152.7.3.1 is installed
  • AND libtensorflow_framework2-gnu-openmpi2-hpc is signed with openSUSE key
  • OR
  • tensorflow2-2.1.2-lp152.7.3.1 is installed
  • AND tensorflow2 is signed with openSUSE key
  • OR
  • tensorflow2-devel-2.1.2-lp152.7.3.1 is installed
  • AND tensorflow2-devel is signed with openSUSE key
  • OR
  • tensorflow2-doc-2.1.2-lp152.7.3.1 is installed
  • AND tensorflow2-doc is signed with openSUSE key
  • OR
  • tensorflow2-gnu-hpc-2.1.2-lp152.7.3.1 is installed
  • AND tensorflow2-gnu-hpc is signed with openSUSE key
  • OR
  • tensorflow2-gnu-openmpi2-hpc-2.1.2-lp152.7.3.1 is installed
  • AND tensorflow2-gnu-openmpi2-hpc is signed with openSUSE key
  • OR
  • tensorflow2-lite-2.1.2-lp152.7.3.1 is installed
  • AND tensorflow2-lite is signed with openSUSE key
  • OR
  • tensorflow2-lite-devel-2.1.2-lp152.7.3.1 is installed
  • AND tensorflow2-lite-devel is signed with openSUSE key
  • OR
  • tensorflow2_2_1_2-gnu-hpc-2.1.2-lp152.7.3.1 is installed
  • AND tensorflow2_2_1_2-gnu-hpc is signed with openSUSE key
  • OR
  • tensorflow2_2_1_2-gnu-hpc-devel-2.1.2-lp152.7.3.1 is installed
  • AND tensorflow2_2_1_2-gnu-hpc-devel is signed with openSUSE key
  • OR
  • tensorflow2_2_1_2-gnu-hpc-doc-2.1.2-lp152.7.3.1 is installed
  • AND tensorflow2_2_1_2-gnu-hpc-doc is signed with openSUSE key
  • OR
  • tensorflow2_2_1_2-gnu-openmpi2-hpc-2.1.2-lp152.7.3.1 is installed
  • AND tensorflow2_2_1_2-gnu-openmpi2-hpc is signed with openSUSE key
  • OR
  • tensorflow2_2_1_2-gnu-openmpi2-hpc-devel-2.1.2-lp152.7.3.1 is installed
  • AND tensorflow2_2_1_2-gnu-openmpi2-hpc-devel is signed with openSUSE key
  • OR
  • tensorflow2_2_1_2-gnu-openmpi2-hpc-doc-2.1.2-lp152.7.3.1 is installed
  • AND tensorflow2_2_1_2-gnu-openmpi2-hpc-doc is signed with openSUSE key
  • BACK