Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101680
HistoryDec 21, 2021 - 12:00 a.m.

NumPy has an unspecified vulnerability (CNVD-2021-101680)

2021-12-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

NumPy is a Python scientific computing package. The product supports a large number of dimensional arrays and matrix calculations, and also provides a large library of mathematical functions for data operations. a security vulnerability exists in NumPy 1.9, which stems from incomplete string comparisons in the software. An attacker could use this vulnerability to compromise the api by constructing a specific string object.

CPENameOperatorVersion
NumPy NumPy >=1.9.0,le1.9.3

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P