NVD Vulnerability Detail

CVE-2020-28975

Summary	svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model SVM (introduced via pickle, json, or any other model permanence standard) with a large value in the _n_support array. NOTE: the scikit-learn vendor's position is that the behavior can only occur if the library's API is violated by an application that changes a private attribute.
Publication Date	Nov. 22, 2020, 6:15 a.m.
Registration Date	Jan. 26, 2021, 11:56 a.m.
Last Update	Nov. 21, 2024, 2:23 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:scikit-learn:scikit-learn::::::::		0.23.2			1.0.1

Related information, measures and tools

No	URL	タグ
1	http://packetstormsecurity.com/files/160281/SciKit-Learn-0.23.2-Denial-Of-Service.html	Exploit Third Party Advisory VDB Entry
2	http://packetstormsecurity.com/files/160281/SciKit-Learn-0.23.2-Denial-Of-Service.html	Exploit Third Party Advisory VDB Entry
3	http://seclists.org/fulldisclosure/2020/Nov/44	Mailing List Third Party Advisory
4	http://seclists.org/fulldisclosure/2020/Nov/44	Mailing List Third Party Advisory
5	https://github.com/cjlin1/libsvm/blob/9a3a9708926dec87d382c43b203f2ca19c2d56a0/svm.cpp#L2501	Exploit Third Party Advisory
6	https://github.com/cjlin1/libsvm/blob/9a3a9708926dec87d382c43b203f2ca19c2d56a0/svm.cpp#L2501	Exploit Third Party Advisory
7	https://github.com/scikit-learn/scikit-learn/commit/1bf13d567d3cd74854aa8343fd25b61dd768bb85	Patch Third Party Advisory
8	https://github.com/scikit-learn/scikit-learn/commit/1bf13d567d3cd74854aa8343fd25b61dd768bb85	Patch Third Party Advisory
9	https://github.com/scikit-learn/scikit-learn/issues/18891	Exploit Issue Tracking Third Party Advisory
10	https://github.com/scikit-learn/scikit-learn/issues/18891	Exploit Issue Tracking Third Party Advisory
11	https://security.gentoo.org/glsa/202301-03	Third Party Advisory
12	https://security.gentoo.org/glsa/202301-03	Third Party Advisory

Common Vulnerabilities List

JVN Vulnerability Information

Libsvm における脆弱性

Title	Libsvm における脆弱性
Summary	未確定本件は、脆弱性として確定していません。 Libsvm には、不特定の脆弱性が存在します。ベンダは、本脆弱性に対して異議を唱えています。詳細については、以下の NVD の Current Description を確認してください。 https://nvd.nist.gov/vuln/detail/CVE-2020-28975
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Nov. 21, 2020, midnight
Registration Date	July 13, 2021, 5:47 p.m.
Last Update	July 13, 2021, 5:47 p.m.

Affected System

scikit-learn

scikit-learn 0.23.2

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2020-28975	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28975
National Vulnerability Database (NVD)
2	CVE-2020-28975	https://nvd.nist.gov/vuln/detail/CVE-2020-28975

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/CWE.html#CWEnoinfo

ベンダー情報

No	Name	URL
GitHub
1	cjlin1/libsvm	https://github.com/cjlin1/libsvm/blob/9a3a9708926dec87d382c43b203f2ca19c2d56a0/svm.cpp#L2501
2	Segmentation fault on SVMLIB #18891	https://github.com/scikit-learn/scikit-learn/issues/18891

その他

No	Name	URL
関連文書
1	scikit-learn 0.23.2 Local Denial of Service	http://seclists.org/fulldisclosure/2020/Nov/44

Change Log

No	Changed Details	Date of change
1	[2021年07月13日] 掲載	July 13, 2021, 5:47 p.m.