Numpy missing input validation
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-12852US | high7.5 | — | ||
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/BT123/testcasesForMyRequest/tree/master/CVE-2017-12852WEB
- https://github.com/advisories/GHSA-frgw-fgh6-9g52ADVISORY
- https://github.com/numpy/numpyPACKAGE
- https://github.com/numpy/numpy/issues/9560#issuecomment-322395292WEB
- https://github.com/numpy/numpy/releases/tag/v1.13.3WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/numpy/PYSEC-2017-1.yamlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2017-12852ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan