Описание
Withdrawn: Use after free in SciPy
Withdrawn Advisory
This advisory has been withdrawn because it has been found to not be an issue. Please see the issue here for more information.
Original Description
A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2023-29824
- https://github.com/scipy/scipy/issues/14713
- https://github.com/scipy/scipy/issues/14713#issuecomment-1629468565
- https://github.com/scipy/scipy/pull/15013
- https://github.com/scipy/scipy/commit/e32fc2329d3dd23298725153c5b2cc7fcd0f14f1
- http://www.square16.org/achievement/cve-2023-29824
Пакеты
scipy
< 1.8.0
1.8.0
Связанные уязвимости
** DISPUTED ** A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.
A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.
A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.
A use-after-free issue was discovered in Py_FindObjects() function in ...
Уязвимость функции Py_FindObjects() библиотеки для языка программирования Python с открытым исходным кодом scipy, позволяющая нарушителю оказывать влияние на конфиденциальность, целостность и доступность системы