Lucene search

K
osvGoogleOSV:GHSA-8RH6-H94M-VJ54
HistoryJan 07, 2022 - 12:01 a.m.

Incorrect Comparison in cvxopt

2022-01-0700:01:11
Google
osv.dev
8

0.001 Low

EPSS

Percentile

35.0%

Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.

0.001 Low

EPSS

Percentile

35.0%