Numpy missing input validation
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-12852US | high7.5 | — | ||
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/BT123/testcasesForMyRequest/tree/master/CVE-2017-12852WEB
- https://github.com/advisories/GHSA-frgw-fgh6-9g52ADVISORY
- https://github.com/numpy/numpyPACKAGE
- https://github.com/numpy/numpy/issues/9560#issuecomment-322395292WEB
- https://github.com/numpy/numpy/releases/tag/v1.13.3WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/numpy/PYSEC-2017-1.yamlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2017-12852ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan