An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."

🗓️ 05 Jan 2022 08:00:00Reported by MicrosoftType

NumPy core string comparison bug before 1.22.0 enables slight copying errors with crafted strings; vendor says it's harmless.

Reporter	Title	Published	Views	Family All 50
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	23 Aug 202222:32	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties Affecting Watson Machine Learning Accelerator on Cloud Pak for Data version	13 Nov 202315:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service, caused by incomplete string comparison in NumPy (CVE-2021-34141)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	17 May 202315:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Python affects IBM watsonx.data	25 Sep 202419:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to a denial of service vulnerability in NumPy (CVE-2021-34141)	3 May 202319:04	–	ibm
ATTACKERKB	CVE-2021-34141	17 Dec 202119:15	–	attackerkb
BDU FSTEC	The vulnerability of the _convert_from_str() function in the numpy.core module of the NumPy library allows a hacker to initiate data copying.	14 Nov 202200:00	–	bdu_fstec
CBLMariner	CVE-2021-34141 affecting package numpy 1.16.6-2	12 Jan 202509:15	–	cbl_mariner
CBLMariner	CVE-2021-34141 affecting package numpy for versions less than 1.22.0-1	9 Apr 202206:51	–	cbl_mariner