CVE-2017-12852
2 advisories.
PyPI/numpy CVE-2017-12852: high 7.5, EPSS 2.74%
Numpy missing input validation
Action: Upgrade numpy to 1.13.3 or later.
pip install numpy==1.13.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.13.3 | - |
Fixed versions
| 1.13.3 |
Sources
- osv: GHSA-frgw-fgh6-9g52
- https://nvd.nist.gov/vuln/detail/CVE-2017-12852
- https://github.com/numpy/numpy/issues/9560#issuecomment-322395292
- https://github.com/BT123/testcasesForMyRequest/tree/master/CVE-2017-12852
- https://github.com/advisories/GHSA-frgw-fgh6-9g52
- https://github.com/numpy/numpy
- https://github.com/numpy/numpy/releases/tag/v1.13.3
- https://github.com/pypa/advisory-database/tree/main/vulns/numpy/PYSEC-2017-1.yaml
CVE-2017-12852 · published · modified · JSON
PyPI/numpy CVE-2017-12852: unknown, EPSS 2.74%
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
Action: Upgrade numpy to 1.13.3 or later.
pip install numpy==1.13.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.13.3 | - |
Fixed versions
| 1.13.3 |
Sources
- osv: PYSEC-2017-1
- https://github.com/numpy/numpy/issues/9560#issuecomment-322395292
- https://github.com/BT123/testcasesForMyRequest/tree/master/CVE-2017-12852
- https://github.com/advisories/GHSA-frgw-fgh6-9g52
CVE-2017-12852 · published · modified · JSON