logo

Database

Inappropriate coding practices In numpy

Description

Numpy missing input validation The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2017-128522. NVD-2017-128523. OSV-2017-128524. GHSA-frgw-fgh6-9g525. GCVE-2017-12852

References

1. https://github.com/numpy/numpy/issues/9560#issuecomment-3223952922. https://github.com/BT123/testcasesForMyRequest/tree/master/CVE-2017-128523. https://github.com/numpy/numpy/releases/tag/v1.13.34. https://github.com/pypa/advisory-database/tree/main/vulns/numpy/PYSEC-2017-1.yaml5. https://github.com/BT123/numpy-1.13.1

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.