PYSEC-2021-857
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2021-41496
- Alias
- GHSA-f7c7-j99h-c22f
Description
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.
Paquets affectés
| Paquet | Versions |
|---|---|
| PyPI · numpy | introduced 0, fixed 1.19.0 |
Références
- https://github.com/numpy/numpy/issues/19000 REPORT
- https://github.com/advisories/GHSA-f7c7-j99h-c22f ADVISORY
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |