GHSA-f7c7-j99h-c22f
Buffer Copy without Checking Size of Input in NumPy
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2021-41496
- Alias
- PYSEC-2021-857
- CVSS_V3
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.
Paquets affectés
| Paquet | Versions |
|---|---|
| PyPI · numpy | introduced 0, fixed 1.19 |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2021-41496 ADVISORY
- https://github.com/numpy/numpy/issues/19000 WEB
- https://github.com/numpy/numpy PACKAGE
- https://www.oracle.com/security-alerts/cpujul2022.html WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |