CVE-2017-12852

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-12852
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-12852.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-12852
Aliases
Related
Withdrawn
2024-06-30T13:40:12.252502Z
Published
2017-08-15T16:29:00Z
Modified
2024-04-11T07:40:47Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.

References

Affected packages

Debian:10 / python-numpy

Package

Name
python-numpy
Purl
pkg:deb/debian/python-numpy?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.14.3-1

Ecosystem specific

{
    "urgency": "unimportant"
}