CVE-2013-4251

Опубликовано: 04 нояб. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120696.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119759.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119771.html
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/63008
Third Party Advisory
VDB Entry
https://access.redhat.com/security/cve/cve-2013-4251
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4251
Issue Tracking
Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4251
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88052
Third Party Advisory
VDB Entry
https://github.com/scipy/scipy/commit/bd296e0336420b840fcd2faabb97084fd252a973
Patch
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-4251
Patch
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120696.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119759.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119771.html
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/63008
Third Party Advisory
VDB Entry
https://access.redhat.com/security/cve/cve-2013-4251
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4251
Issue Tracking
Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4251
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88052
Third Party Advisory
VDB Entry
https://github.com/scipy/scipy/commit/bd296e0336420b840fcd2faabb97084fd252a973
Patch
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-4251
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:scipy:scipy:*:*:*:*:*:*:*:*

Версия до 0.12.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 25%

0.00086

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-269

Связанные уязвимости

CVE-2013-4251

CVSS3: 7.8

ubuntu

больше 6 лет назад

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.

CVE-2013-4251

redhat

больше 12 лет назад

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.

CVE-2013-4251

CVSS3: 7.8

debian

больше 6 лет назад

The scipy.weave component in SciPy before 0.12.1 creates insecure temp ...

GHSA-xp76-357g-9wqq

CVSS3: 7.8

github

почти 4 года назад

SciPy creates insecure temporary directories

EPSS

Процентиль: 25%

0.00086

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-269