The vulnerability of the Py_FindObjects() function in the Python programming language library, which is open-source and part of the scipy library, allows a hacker to trigger a denial-of-service attack.

The Py_FindObjects function in the Python SciPy library can cause a denial of service due to memory not being released after use.

Reporter	Title	Published	Views	Family All 82
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Automation Workflow Machine Learning Server are addressed with 23.0.2-IF001	19 Feb 202416:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	26 Sep 202315:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service due to [CVE-2023-25399]	10 Jul 202314:02	–	ibm
IBM Security Bulletins	Security Bulletin: Scipy is vulnerable to CVE-2023-25399 used in IBM Maximo Application Suite - Monitor Component	20 Feb 202418:11	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in SciPy may affect IBM Robotic Process Automation for Cloud Pak and result in a denial of service. (CVE-2023-25399).	23 Nov 202321:26	–	ibm
ATTACKERKB	CVE-2023-25399	5 Jul 202317:15	–	attackerkb
Circl	CVE-2023-25399	5 Jul 202320:22	–	circl
CNNVD	SciPy 安全漏洞	5 Jul 202300:00	–	cnnvd
CVE	CVE-2023-25399	5 Jul 202300:00	–	cve
Cvelist	CVE-2023-25399	5 Jul 202300:00	–	cvelist

Vulners

Node

python scipyRange<1.10.0

Source	Link
github	www.github.com/scipy/scipy/issues/16235
github	www.github.com/scipy/scipy/issues/16235
github	www.github.com/scipy/scipy/pull/16397
redos	www.redos.red-soft.ru/support/secure/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-25399
ubuntu	www.ubuntu.com/security/CVE-2023-25399
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.6

CVSS 35.5

EPSS0.00222