Description
Buffer Copy without Checking Size of Input in NumPy
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 pypi | | | 1.19 |
 debian 12 | | =1:1.24.2-1 || =1:1.24.2-1+deb12u1 || =1:1.24.2-2 || =1:1.24.2-2+hurd.1 || =1:1.24.2-3 || =1:1.26.3-1 || =1:1.26.3-2 || =1:1.26.4+ds-1 || =1:1.26.4+ds-10 || =1:1.26.4+ds-11 || =1:1.26.4+ds-12 || =1:1.26.4+ds-13 || =1:1.26.4+ds-2 || =1:1.26.4+ds-3 || =1:1.26.4+ds-4 || =1:1.26.4+ds-5 || =1:1.26.4+ds-6 || =1:1.26.4+ds-7 || =1:1.26.4+ds-8 || =1:1.26.4+ds-9 || =1:1.26.4+ds-9~exp1 || =1:2.1.0+ds-1 || =1:2.1.0+ds-2 || =1:2.1.1+ds-1 || =1:2.1.1+ds-2 || =1:2.1.1+ds-3 || =1:2.1.2+ds-1 || =1:2.1.3+ds-1 || =1:2.1.3+ds-2 || =1:2.2.0+ds-1 || =1:2.2.1+ds-1 || =1:2.2.1+ds-2 || =1:2.2.2+ds-1 || =1:2.2.2+ds-2 || =1:2.2.3+ds-1 || =1:2.2.3+ds-2 || =1:2.2.3+ds-3 || =1:2.2.3+ds-4 || =1:2.2.3+ds-5 || =1:2.2.4+ds-1 || =1:2.2.4+ds-1.1 || =1:2.2.4+ds-1.2 || =1:2.3.2+ds-1 || =1:2.3.3+ds-1 || =1:2.3.3+ds-2 || =1:2.3.3+ds-3 || =1:2.3.4+ds-1 || =1:2.3.4+ds-2 || =1:2.3.4+ds-3 || =1:2.3.5+ds-1 || =1:2.3.5+ds-2 || =1:2.3.5+ds-3 || =1:2.4.1+ds-1 || =1:2.4.2+ds-1 || =1:2.4.3+ds-1 || =1:2.4.4+ds-1 || =1:2.4.4+ds-2 || =1:2.4.6+ds-1 || =1:2.4.6+ds-2 || =1:2.4.6+ds-3 || =1:2.4.6+ds-4 | - |
debian 13 | | =1:2.2.4+ds-1 || =1:2.2.4+ds-1.1 || =1:2.2.4+ds-1.2 || =1:2.3.2+ds-1 || =1:2.3.3+ds-1 || =1:2.3.3+ds-2 || =1:2.3.3+ds-3 || =1:2.3.4+ds-1 || =1:2.3.4+ds-2 || =1:2.3.4+ds-3 || =1:2.3.5+ds-1 || =1:2.3.5+ds-2 || =1:2.3.5+ds-3 || =1:2.4.1+ds-1 || =1:2.4.2+ds-1 || =1:2.4.3+ds-1 || =1:2.4.4+ds-1 || =1:2.4.4+ds-2 || =1:2.4.6+ds-1 || =1:2.4.6+ds-2 || =1:2.4.6+ds-3 || =1:2.4.6+ds-4 | - |
debian 14 | | =1:2.2.4+ds-1 || =1:2.2.4+ds-1.1 || =1:2.2.4+ds-1.2 || =1:2.3.2+ds-1 || =1:2.3.3+ds-1 || =1:2.3.3+ds-2 || =1:2.3.3+ds-3 || =1:2.3.4+ds-1 || =1:2.3.4+ds-2 || =1:2.3.4+ds-3 || =1:2.3.5+ds-1 || =1:2.3.5+ds-2 || =1:2.3.5+ds-3 || =1:2.4.1+ds-1 || =1:2.4.2+ds-1 || =1:2.4.3+ds-1 || =1:2.4.4+ds-1 || =1:2.4.4+ds-2 || =1:2.4.6+ds-1 || =1:2.4.6+ds-2 || =1:2.4.6+ds-3 || =1:2.4.6+ds-4 | - |
debian 11 | | =1:1.19.5-1 || =1:1.20.0-1 || =1:1.20.2-1 || =1:1.21.2-1 || =1:1.21.2-2 || =1:1.21.2-3 || =1:1.21.4-1 || =1:1.21.4-2 || =1:1.21.5-1 || =1:1.21.5-2 || =1:1.22.1-1 || =1:1.23.1-1 || =1:1.23.2-1 || =1:1.23.3-1 || =1:1.23.5-1 || =1:1.23.5-2 || =1:1.24.0-1 || =1:1.24.1-1 || =1:1.24.1-2 || =1:1.24.2-1 || =1:1.24.2-1~hurd.1 || =1:1.24.2-2 || =1:1.24.2-2+hurd.1 || =1:1.24.2-3 || =1:1.26.3-1 || =1:1.26.3-2 || =1:1.26.4+ds-1 || =1:1.26.4+ds-10 || =1:1.26.4+ds-11 || =1:1.26.4+ds-12 || =1:1.26.4+ds-13 || =1:1.26.4+ds-2 || =1:1.26.4+ds-3 || =1:1.26.4+ds-4 || =1:1.26.4+ds-5 || =1:1.26.4+ds-6 || =1:1.26.4+ds-7 || =1:1.26.4+ds-8 || =1:1.26.4+ds-9 || =1:1.26.4+ds-9~exp1 || =1:2.1.0+ds-1 || =1:2.1.0+ds-2 || =1:2.1.1+ds-1 || =1:2.1.1+ds-2 || =1:2.1.1+ds-3 || =1:2.1.2+ds-1 || =1:2.1.3+ds-1 || =1:2.1.3+ds-2 || =1:2.2.0+ds-1 || =1:2.2.1+ds-1 || =1:2.2.1+ds-2 || =1:2.2.2+ds-1 || =1:2.2.2+ds-2 || =1:2.2.3+ds-1 || =1:2.2.3+ds-2 || =1:2.2.3+ds-3 || =1:2.2.3+ds-4 || =1:2.2.3+ds-5 || =1:2.2.4+ds-1 || =1:2.2.4+ds-1.1 || =1:2.2.4+ds-1.2 || =1:2.3.2+ds-1 || =1:2.3.3+ds-1 || =1:2.3.3+ds-2 || =1:2.3.3+ds-3 || =1:2.3.4+ds-1 || =1:2.3.4+ds-2 || =1:2.3.4+ds-3 || =1:2.3.5+ds-1 || =1:2.3.5+ds-2 || =1:2.3.5+ds-3 || =1:2.4.1+ds-1 || =1:2.4.2+ds-1 || =1:2.4.3+ds-1 || =1:2.4.4+ds-1 || =1:2.4.4+ds-2 || =1:2.4.6+ds-1 || =1:2.4.6+ds-2 || =1:2.4.6+ds-3 || =1:2.4.6+ds-4 | - |
 rpm rhel6 | | - | - |
rpm rhel7 | | - | - |
rpm rhel8 | | - | - |
