Lucene search

K
osvGoogleOSV:PYSEC-2021-870
HistoryDec 17, 2021 - 9:15 p.m.

PYSEC-2021-870

2021-12-1721:15:00
Google
osv.dev
6

0.001 Low

EPSS

Percentile

35.0%

Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.

0.001 Low

EPSS

Percentile

35.0%