Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19 which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)

🗓️ 28 Dec 2021 08:00:00Reported by MicrosoftType

Buffer overflow in NumPy array_from_pyobj (fortranobject.c) allows denial of service via negative values.

Reporter	Title	Published	Views	Family All 123
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	23 Aug 202222:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service, caused by a buffer overflow in NumPy (CVE-2021-41496)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in NumPy	30 Mar 202215:20	–	ibm
CBLMariner	CVE-2021-41496 affecting package numpy 1.16.6-2	12 Jan 202203:54	–	cbl_mariner
CBLMariner	CVE-2021-41496 affecting package numpy for versions less than 1.22.0-1	9 Apr 202206:51	–	cbl_mariner
Circl	CVE-2021-41496	17 Dec 202122:37	–	circl
CNNVD	NumPy 安全漏洞	17 Dec 202100:00	–	cnnvd
CVE	CVE-2021-41496	17 Dec 202119:56	–	cve
Cvelist	CVE-2021-41496	17 Dec 202119:56	–	cvelist
Debian CVE	CVE-2021-41496	17 Dec 202119:56	–	debiancve