CVE-2018-1000052 (High) detected in marian-1.7.0

[mend-for-github.aaakk.us.kg]

CVE-2018-1000052 - High Severity Vulnerability

Vulnerable Library - marian1.7.0

Fast Neural Machine Translation in C++

Library home page: https://github.com/marian-nmt/marian.git

Found in HEAD commit: 4e069656676f15c244c5615281f2aa29707b4366

Library Source Files (373)

* The source files were matched to this source library based on a best effort match. Source libraries are selected from a list of probable public libraries.

• /marian/src/3rd_party/spdlog/include/spdlog/sinks/android_sink.h
• /marian/src/3rd_party/yaml-cpp/node/detail/node_ref.h
• /marian/src/training/scheduler.h
• /marian/src/common/compile_time_crc32.h
• /marian/src/tensors/tensor_operators.h
• /marian/src/3rd_party/yaml-cpp/contrib/graphbuilderadapter.cpp
• /marian/src/tensors/cpu/add.h
• /marian/src/3rd_party/spdlog/include/spdlog/fmt/bundled/posix.h
• /marian/src/3rd_party/yaml-cpp/scanner.h
• /marian/src/optimizers/optimizers.cpp
• /marian/src/3rd_party/yaml-cpp/parser.h
• /marian/src/tensors/gpu/cudnn_wrappers.h
• /marian/src/3rd_party/SQLiteCpp/include/SQLiteCpp/Statement.h
• /marian/src/functional/tmp.h
• /marian/src/3rd_party/yaml-cpp/node/detail/node_iterator.h
• /marian/src/common/config.h
• /marian/src/functional/predicates.h
• /marian/src/3rd_party/spdlog/details/line_logger_fwd.h
• /marian/src/3rd_party/SQLiteCpp/include/SQLiteCpp/VariadicBind.h
• /marian/src/common/cli_helper.h
• /marian/src/translator/helpers.cpp
• /marian/src/training/graph_group_async_drop.cpp
• /marian/src/3rd_party/CLI/Formatter.hpp
• /marian/src/3rd_party/yaml-cpp/nodeevents.cpp
• /marian/src/data/alignment.cpp
• /marian/src/3rd_party/SQLiteCpp/include/SQLiteCpp/Exception.h
• /marian/src/tensors/cpu/sharp/sse_gemm.cpp
• /marian/src/3rd_party/spdlog/include/spdlog/details/async_log_helper.h
• /marian/src/3rd_party/spdlog/details/async_logger_impl.h
• /marian/src/training/graph_group_sync.cpp
• /marian/src/training/graph_group_async.h
• /marian/src/3rd_party/spdlog/sinks/file_sinks.h
• /marian/src/3rd_party/yaml-cpp/emitter.cpp
• /marian/src/data/shortlist.h
• /marian/src/3rd_party/yaml-cpp/node/detail/bool_type.h
• /marian/src/3rd_party/yaml-cpp/node/node.h
• /marian/src/3rd_party/yaml-cpp/emitterutils.h
• /marian/src/3rd_party/SQLiteCpp/src/Transaction.cpp
• /marian/src/training/graph_group_multinode.h
• /marian/src/3rd_party/spdlog/include/spdlog/sinks/stdout_sinks.h
• /marian/src/data/text_input.h
• /marian/src/3rd_party/spdlog/details/os.h
• /marian/src/translator/output_printer.h
• /marian/src/3rd_party/threadpool.h
• /marian/src/3rd_party/CLI/ConfigFwd.hpp
• /marian/src/3rd_party/yaml-cpp/ostream_wrapper.cpp
• /marian/src/3rd_party/spdlog/include/spdlog/sinks/dist_sink.h
• /marian/src/3rd_party/spdlog/include/spdlog/logger.h
• /marian/src/3rd_party/yaml-cpp/nodebuilder.h
• /marian/src/3rd_party/yaml-cpp/node/parse.h
• /marian/src/3rd_party/spdlog/include/spdlog/fmt/bundled/ostream.h
• /marian/src/3rd_party/pathie-cpp/src/pathie_ofstream.cpp
• /marian/src/command/marian_vocab.cpp
• /marian/src/3rd_party/CLI/Split.hpp
• /marian/src/data/corpus_nbest.h
• /marian/src/common/binary.h
• /marian/src/3rd_party/yaml-cpp/ostream_wrapper.h
• /marian/src/common/shape.h
• /marian/src/3rd_party/spdlog/spdlog.h
• /marian/src/data/corpus_nbest.cpp
• /marian/src/3rd_party/spdlog/include/spdlog/formatter.h
• /marian/src/3rd_party/SQLiteCpp/sqlite3/sqlite3.h
• /marian/src/examples/mnist/dataset.h
• /marian/src/3rd_party/spdlog/include/spdlog/fmt/bundled/time.h
• /marian/src/rnn/attention.cpp
• /marian/src/functional/tensor.h
• /marian/src/3rd_party/spdlog/details/log_msg.h
• /marian/src/common/cli_wrapper.cpp
• /marian/src/translator/output_printer.cpp
• /marian/src/common/definitions.h
• /marian/src/3rd_party/pathie-cpp/include/path.hpp
• /marian/src/3rd_party/SQLiteCpp/include/SQLiteCpp/Database.h
• /marian/src/graph/node.h
• /marian/src/3rd_party/yaml-cpp/exceptions.cpp
• /marian/src/3rd_party/spdlog/include/spdlog/details/mpmc_bounded_q.h
• /marian/src/3rd_party/SQLiteCpp/include/SQLiteCpp/Transaction.h
• /marian/src/common/config_validator.h
• /marian/src/3rd_party/pathie-cpp/include/temp.hpp
• /marian/src/tensors/memory_piece.h
• /marian/src/3rd_party/yaml-cpp/scanscalar.h
• /marian/src/3rd_party/yaml-cpp/setting.h
• /marian/src/3rd_party/catch.hpp
• /marian/src/3rd_party/yaml-cpp/singledocparser.cpp
• /marian/src/tensors/gpu/prod.h
• /marian/src/3rd_party/any_type.h
• /marian/src/3rd_party/spdlog/details/spdlog_impl.h
• /marian/src/training/exponential_smoothing.h
• /marian/src/3rd_party/yaml-cpp/traits.h
• /marian/src/3rd_party/spdlog/bench/latency/g3log-crush.cpp
• /marian/scripts/server/client_example.py
• /marian/src/3rd_party/yaml-cpp/noncopyable.h
• /marian/src/3rd_party/spdlog/include/spdlog/sinks/base_sink.h
• /marian/src/3rd_party/yaml-cpp/ptr_vector.h
• /marian/src/3rd_party/zstr/strict_fstream.hpp
• /marian/src/training/graph_group_singleton.cpp
• /marian/src/training/gradient_dropping/sparse_tensor.h
• /marian/src/layers/weight.h
• /marian/src/3rd_party/yaml-cpp/node/detail/memory.h
• /marian/src/3rd_party/pathie-cpp/include/pathie_ofstream.hpp
• /marian/src/3rd_party/spdlog/bench/latency/g3log-latency.cpp
• /marian/src/3rd_party/spdlog/details/pattern_formatter_impl.h
• /marian/src/3rd_party/CLI/App.hpp
• /marian/src/layers/guided_alignment.h
• /marian/src/3rd_party/spdlog/example/bench.cpp
• /marian/src/3rd_party/simple-websocket-server/status_code.hpp
• /marian/src/3rd_party/pathie-cpp/include/pathie.hpp
• /marian/src/3rd_party/yaml-cpp/dll.h
• /marian/src/3rd_party/spdlog/bench/easylogging-bench-mt.cpp
• /marian/src/training/graph_group_singleton.h
• /marian/src/tensors/gpu/cuda_helpers.h
• /marian/src/3rd_party/spdlog/include/spdlog/fmt/bundled/format.cc
• /marian/src/layers/convolution.cpp
• /marian/src/3rd_party/yaml-cpp/emitter.h
• /marian/src/3rd_party/yaml-cpp/contrib/anchordict.h
• /marian/src/models/encoder.h
• /marian/src/graph/node_initializers.h
• /marian/src/layers/weight.cpp
• /marian/src/3rd_party/spdlog/details/format.cc
• /marian/src/3rd_party/yaml-cpp/stringsource.h
• /marian/src/models/costs.h
• /marian/src/training/training_state.h
• /marian/src/3rd_party/SQLiteCpp/src/Backup.cpp
• /marian/src/3rd_party/spdlog/include/spdlog/details/log_msg.h
• /marian/src/data/batch.h
• /marian/src/3rd_party/spdlog/tweakme.h
• /marian/src/3rd_party/spdlog/details/logger_impl.h
• /marian/src/examples/mnist/validator.h
• /marian/src/3rd_party/spdlog/details/file_helper.h
• /marian/src/command/marian_train.cpp
• /marian/src/translator/output_collector.cpp
• /marian/src/3rd_party/yaml-cpp/tag.h
• /marian/src/functional/array.h
• /marian/src/3rd_party/pathie-cpp/src/entry_iterator.cpp
• /marian/src/training/graph_group_sync.h
• /marian/src/3rd_party/pathie-cpp/src/temp.cpp
• /marian/src/3rd_party/spdlog/bench/spdlog-bench-mt.cpp
• /marian/src/3rd_party/yaml-cpp/nodebuilder.cpp
• /marian/src/tensors/dispatch.h
• /marian/src/layers/constructors.h
• /marian/src/translator/output_collector.h
• /marian/src/3rd_party/yaml-cpp/emitfromevents.cpp
• /marian/src/translator/history.h
• /marian/src/3rd_party/SQLiteCpp/sqlite3/sqlite3.c
• /marian/src/3rd_party/yaml-cpp/emitterstate.cpp
• /marian/src/3rd_party/spdlog/async_logger.h
• /marian/src/rnn/types.h
• /marian/src/3rd_party/spdlog/details/line_logger_impl.h
• /marian/src/3rd_party/spdlog/include/spdlog/sinks/ostream_sink.h
• /marian/src/3rd_party/yaml-cpp/stream.h
• /marian/src/3rd_party/CLI/Error.hpp
• /marian/src/3rd_party/spdlog/include/spdlog/details/registry.h
• /marian/src/3rd_party/simple-websocket-server/utility.hpp
• /marian/src/3rd_party/yaml-cpp/token.h
• /marian/src/3rd_party/yaml-cpp/regex_yaml.h
• /marian/src/3rd_party/spdlog/sinks/msvc_sink.h
• /marian/src/graph/parameters.h
• /marian/src/graph/node_operators.h
• /marian/src/3rd_party/spdlog/bench/glog-bench-mt.cpp
• /marian/src/3rd_party/CLI/CLI.hpp
• /marian/src/tensors/cpu/sharp/int_gemm.h
• /marian/src/3rd_party/spdlog/bench/boost-bench-mt.cpp
• /marian/src/3rd_party/yaml-cpp/node/convert.h
• /marian/src/3rd_party/cnpy/cnpy.h
• /marian/src/3rd_party/spdlog/include/spdlog/details/os.h
• /marian/src/training/validator.h
• /marian/src/rnn/cells.h
• /marian/src/examples/mnist/model.h
• /marian/src/data/batch_stats.h
• /marian/src/3rd_party/yaml-cpp/yaml.h
• /marian/src/3rd_party/pathie-cpp/src/pathie_ifstream.cpp
• /marian/src/tensors/gpu/sparse.h
• /marian/src/3rd_party/spdlog/details/registry.h
• /marian/src/3rd_party/CLI/TypeTools.hpp
• /marian/src/examples/iris/helper.cpp
• /marian/src/data/corpus_sqlite.h
• /marian/src/3rd_party/spdlog/include/spdlog/tweakme.h
• /marian/src/3rd_party/yaml-cpp/stream.cpp
• /marian/src/3rd_party/spdlog/bench/g2log-async.cpp
• /marian/src/functional/approx.h
• /marian/src/3rd_party/CLI/Optional.hpp
• /marian/src/3rd_party/simple-websocket-server/crypto.hpp
• /marian/src/3rd_party/spdlog/include/spdlog/common.h
• /marian/src/3rd_party/SQLiteCpp/include/SQLiteCpp/Backup.h
• /marian/src/3rd_party/spdlog/include/spdlog/async_logger.h
• /marian/src/3rd_party/spdlog/include/spdlog/sinks/syslog_sink.h
• /marian/src/3rd_party/ExceptionWithCallStack.h
• /marian/src/3rd_party/yaml-cpp/scanner.cpp
• /marian/src/common/options.h
• /marian/src/rnn/constructors.h
• /marian/src/3rd_party/pathie-cpp/include/errors.hpp
• /marian/src/microsoft/quicksand.h
• /marian/src/3rd_party/yaml-cpp/binary.h
• /marian/src/models/encoder_decoder.h
• /marian/src/3rd_party/yaml-cpp/collectionstack.h
• /marian/src/3rd_party/spdlog/example/multisink.cpp
• /marian/src/3rd_party/SQLiteCpp/src/Statement.cpp
• /marian/src/data/text_input.cpp
• /marian/src/3rd_party/yaml-cpp/emitfromevents.h
• /marian/src/3rd_party/SQLiteCpp/src/Column.cpp
• /marian/src/microsoft/quicksand.cpp
• /marian/src/3rd_party/spdlog/common.h
• /marian/src/3rd_party/yaml-cpp/tag.cpp
• /marian/src/3rd_party/yaml-cpp/binary_renamed.cpp
• /marian/src/common/config.cpp
• /marian/src/3rd_party/SQLiteCpp/include/SQLiteCpp/Column.h
• /marian/src/3rd_party/yaml-cpp/singledocparser.h
• /marian/src/training/graph_group.h
• /marian/src/tensors/device.h
• /marian/src/3rd_party/spdlog/sinks/ostream_sink.h
• /marian/src/3rd_party/spdlog/include/spdlog/details/async_logger_impl.h
• /marian/src/3rd_party/yaml-cpp/node/detail/iterator_fwd.h
• /marian/src/functional/operands.h
• /marian/src/3rd_party/yaml-cpp/exp.cpp
• /marian/src/graph/expression_graph.h
• /marian/src/training/gradient_dropping/dropper.h
• /marian/src/3rd_party/spdlog/include/spdlog/spdlog.h
• /marian/src/data/alignment.h
• /marian/src/models/transformer.h
• /marian/contrib/vim/.ycm_extra_conf.py
• /marian/src/layers/factory.h
• /marian/src/3rd_party/yaml-cpp/node/detail/node_data.h
• /marian/src/functional/floats.h
• /marian/src/models/model_factory.h
• /marian/src/models/model_factory.cpp
• /marian/src/3rd_party/yaml-cpp/streamcharsource.h
• /marian/src/models/model_base.h
• /marian/src/3rd_party/spdlog/sinks/ansicolor_sink.h
• /marian/src/3rd_party/spdlog/details/async_log_helper.h
• /marian/src/3rd_party/yaml-cpp/null.h
• /marian/src/rnn/rnn.h
• /marian/src/graph/chainable.h
• /marian/src/3rd_party/yaml-cpp/emitterutils.cpp
• /marian/src/3rd_party/yaml-cpp/node/ptr.h
• /marian/src/training/gradient_dropping/gpu/sparse_algorithm.h
• /marian/src/3rd_party/CLI/Macros.hpp
• /marian/src/common/io.cpp
• /marian/src/3rd_party/SQLiteCpp/src/Database.cpp
• /marian/src/3rd_party/spdlog/sinks/dist_sink.h
• /marian/src/3rd_party/yaml-cpp/node/impl.h
• /marian/src/3rd_party/yaml-cpp/convert.cpp
• /marian/src/3rd_party/yaml-cpp/contrib/graphbuilder.h
• /marian/src/3rd_party/spdlog/include/spdlog/fmt/bundled/format.h
• /marian/src/3rd_party/yaml-cpp/node_data.cpp
• /marian/src/data/dataset.h
• /marian/src/3rd_party/CLI/Option.hpp
• /marian/src/3rd_party/yaml-cpp/scantag.cpp
• /marian/src/3rd_party/yaml-cpp/node/detail/node.h
• /marian/src/3rd_party/spdlog/bench/latency/spdlog-latency.cpp
• /marian/src/data/batch_generator.h
• /marian/src/3rd_party/yaml-cpp/simplekey.cpp
• /marian/src/rnn/attention.h
• /marian/src/3rd_party/spdlog/include/spdlog/sinks/ansicolor_sink.h
• /marian/src/common/config_parser.h
• /marian/src/3rd_party/yaml-cpp/exceptions.h
• /marian/src/layers/convolution.h
• /marian/src/graph/expression_graph.cpp
• /marian/src/tensors/tensor_allocator.h
• /marian/src/data/types.h
• /marian/src/3rd_party/yaml-cpp/regex_yaml.cpp
• /marian/src/3rd_party/spdlog/sinks/syslog_sink.h
• /marian/src/models/decoder.h
• /marian/src/3rd_party/spdlog/include/spdlog/sinks/wincolor_sink.h
• /marian/src/3rd_party/yaml-cpp/stlemitter.h
• /marian/src/graph/node_initializers.cpp
• /marian/src/data/corpus.h
• /marian/src/3rd_party/spdlog/include/spdlog/details/pattern_formatter_impl.h
• /marian/src/rnn/cells.cpp
• /marian/src/tensors/gpu/backend.h
• /marian/src/examples/mnist/mnist_ffnn.cpp
• /marian/src/layers/word2vec_reader.h
• /marian/src/graph/expression_operators.cpp
• /marian/src/3rd_party/yaml-cpp/contrib/graphbuilderadapter.h
• /marian/src/data/corpus_sqlite.cpp
• /marian/src/translator/nth_element.cpp
• /marian/src/translator/hypothesis.h
• /marian/src/3rd_party/spdlog/include/spdlog/sinks/file_sinks.h
• /marian/src/3rd_party/SQLiteCpp/include/SQLiteCpp/Assertion.h
• /marian/src/tensors/cpu/tensor_operators.cpp
• /marian/src/common/utils.cpp
• /marian/src/models/s2s.h
• /marian/src/functional/shape.h
• /marian/src/3rd_party/spdlog/example/example.cpp
• /marian/src/3rd_party/pathie-cpp/src/errors.cpp
• /marian/src/translator/beam_search.h
• /marian/src/3rd_party/yaml-cpp/parser.cpp
• /marian/src/3rd_party/spdlog/include/spdlog/details/logger_impl.h
• /marian/src/translator/scorers.cpp
• /marian/src/training/communicator.cpp
• /marian/src/3rd_party/spdlog/details/mpmc_bounded_q.h
• /marian/src/training/graph_group_async.cpp
• /marian/src/3rd_party/spdlog/include/spdlog/sinks/msvc_sink.h
• /marian/src/common/config_validator.cpp
• /marian/src/3rd_party/reduce_all.h
• /marian/src/training/graph_group_multinode_sync.h
• /marian/src/examples/iris/iris.cpp
• /marian/src/3rd_party/yaml-cpp/exp.h
• /marian/src/examples/mnist/training.h
• /marian/scripts/embeddings/prepare_corpus.py
• /marian/src/data/iterator_facade.h
• /marian/src/3rd_party/SQLiteCpp/src/Exception.cpp
• /marian/src/3rd_party/yaml-cpp/scantoken.cpp
• /marian/src/3rd_party/spdlog/include/spdlog/details/spdlog_impl.h
• /marian/src/data/corpus_base.h
• /marian/src/3rd_party/yaml-cpp/node/detail/iterator.h
• /marian/src/3rd_party/spdlog/bench/boost-bench.cpp
• /marian/src/3rd_party/yaml-cpp/parse.cpp
• /marian/src/common/utils.h
• /marian/src/models/states.h
• /marian/src/rnn/attention_constructors.h
• /marian/src/common/io.h
• /marian/src/3rd_party/yaml-cpp/eventhandler.h
• /marian/src/training/validator.cpp
• /marian/src/training/graph_group_multinode_sync.cpp
• /marian/src/graph/expression_operators.h
• /marian/src/common/logging.h
• /marian/src/3rd_party/spdlog/sinks/android_sink.h
• /marian/src/3rd_party/simple-websocket-server/server_ws.hpp
• /marian/src/3rd_party/spdlog/include/spdlog/fmt/bundled/ostream.cc
• /marian/src/3rd_party/spdlog/details/format.h
• /marian/src/3rd_party/yaml-cpp/regeximpl.h
• /marian/src/3rd_party/SQLiteCpp/include/SQLiteCpp/SQLiteCpp.h
• /marian/src/tensors/cpu/int16.h
• /marian/scripts/contrib/inject_model_params.py
• /marian/src/3rd_party/yaml-cpp/nodeevents.h
• /marian/src/3rd_party/yaml-cpp/emitterstate.h
• /marian/src/3rd_party/yaml-cpp/emittermanip.h
• /marian/scripts/contrib/inject_ctt.py
• /marian/src/3rd_party/spdlog/formatter.h
• /marian/src/translator/scorers.h
• /marian/src/graph/auto_tuner.h
• /marian/src/training/training.h
• /marian/src/optimizers/optimizers.h
• /marian/src/3rd_party/pathie-cpp/include/entry_iterator.hpp
• /marian/src/3rd_party/yaml-cpp/mark.h
• /marian/src/3rd_party/pathie-cpp/include/pathie_ifstream.hpp
• /marian/src/graph/node.cpp
• /marian/scripts/embeddings/process_word2vec.py
• /marian/src/3rd_party/ExceptionWithCallStack.cpp
• /marian/src/3rd_party/spdlog/include/spdlog/details/file_helper.h
• /marian/src/common/types.h
• /marian/src/3rd_party/yaml-cpp/node/emit.h
• /marian/src/3rd_party/spdlog/sinks/base_sink.h
• /marian/src/command/marian_conv.cpp
• /marian/src/common/binary.cpp
• /marian/src/3rd_party/yaml-cpp/directives.h
• /marian/src/tensors/cpu/element.h
• /marian/src/rescorer/score_collector.h
• /marian/src/optimizers/clippers.h
• /marian/src/3rd_party/CLI/StringTools.hpp
• /marian/src/3rd_party/spdlog/bench/spdlog-async.cpp
• /marian/src/3rd_party/SQLiteCpp/include/SQLiteCpp/Utils.h
• /marian/src/3rd_party/CLI/FormatterFwd.hpp
• /marian/src/3rd_party/spdlog/bench/spdlog-null-async.cpp
• /marian/src/tensors/backend.h
• /marian/src/3rd_party/yaml-cpp/scanscalar.cpp
• /marian/src/training/graph_group_async_drop.h
• /marian/src/3rd_party/yaml-cpp/node/detail/impl.h
• /marian/src/3rd_party/CLI/Config.hpp
• /marian/src/graph/node_operators.cpp
• /marian/src/3rd_party/CLI/Validators.hpp
• /marian/src/3rd_party/spdlog/logger.h
• /marian/src/3rd_party/yaml-cpp/node/iterator.h
• /marian/src/3rd_party/yaml-cpp/indentation.h
• /marian/src/3rd_party/spdlog/sinks/stdout_sinks.h
• /marian/src/common/cli_helper.cpp
• /marian/src/3rd_party/CLI/Timer.hpp
• /marian/scripts/embeddings/export_embeddings.py
• /marian/src/layers/generic.h
• /marian/src/3rd_party/spdlog/include/spdlog/fmt/bundled/posix.cc
• /marian/src/models/encoder_decoder.cpp
• /marian/scripts/contrib/model_info.py
• /marian/src/tensors/allocator.h
• /marian/src/3rd_party/spdlog/include/spdlog/sinks/sink.h

Vulnerability Details

fmtlib version prior to version 4.1.0 (before commit 0555cea5fc0bf890afe0071a558e44625a34ba85) contains a Memory corruption (SIGSEGV), CWE-134 vulnerability in fmt::print() library function that can result in Denial of Service. This attack appear to be exploitable via Specifying an invalid format specifier in the fmt::print() function results in a SIGSEGV (memory corruption, invalid write). This vulnerability appears to have been fixed in after commit 8cf30aa2be256eba07bb1cefb998c52326e846e7.

Publish Date: 2018-02-09

URL: CVE-2018-1000052

CVSS 3 Score Details (7.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Change files

Origin: fmtlib/fmt@8cf30aa

Release Date: 2018-02-02

Fix Resolution: Replace or update the following files: format.h, format-test.cc