Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-12852

Опубликовано: 15 авг. 2017
Источник: debian
EPSS Низкий

Описание

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
python-numpyfixed1:1.14.3-1package

Примечания

  • https://github.com/numpy/numpy/issues/9560#issuecomment-322395292

  • Negligible security impact

EPSS

Процентиль: 74%
0.00808
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 8 лет назад

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.

CVSS3: 4
redhat
больше 8 лет назад

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.

CVSS3: 7.5
nvd
больше 8 лет назад

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.

suse-cvrf
около 3 лет назад

Security update for python-numpy

suse-cvrf
около 8 лет назад

Initial release of python-numpy for HPC (v1.13.3, gcc)

EPSS

Процентиль: 74%
0.00808
Низкий