UBUNTU-CVE-2023-25399

🗓️ 06 Jul 2023 00:00:00Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Memory leak from refcounting in SciPy Py_FindObjects; commit 8627df31ab; disputed as bug, not vulnerability.

Reporter	Title	Published	Views	Family All 82
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Automation Workflow Machine Learning Server are addressed with 23.0.2-IF001	19 Feb 202416:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	26 Sep 202315:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service due to [CVE-2023-25399]	10 Jul 202314:02	–	ibm
IBM Security Bulletins	Security Bulletin: Scipy is vulnerable to CVE-2023-25399 used in IBM Maximo Application Suite - Monitor Component	20 Feb 202418:11	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in SciPy may affect IBM Robotic Process Automation for Cloud Pak and result in a denial of service. (CVE-2023-25399).	23 Nov 202321:26	–	ibm
ATTACKERKB	CVE-2023-25399	5 Jul 202317:15	–	attackerkb
BDU FSTEC	The vulnerability of the Py_FindObjects() function in the Python programming language library, which is open-source and part of the scipy library, allows a hacker to trigger a denial-of-service attack.	24 Sep 202400:00	–	bdu_fstec
Circl	CVE-2023-25399	5 Jul 202320:22	–	circl
CNNVD	SciPy 安全漏洞	5 Jul 202300:00	–	cnnvd
CVE	CVE-2023-25399	5 Jul 202300:00	–	cve

Source	Link
ubuntu	www.ubuntu.com/security/CVE-2023-25399
github	www.github.com/scipy/scipy/issues/16235
github	www.github.com/scipy/scipy/pull/16397
square16	www.square16.org/achievement/cve-2023-25399/
ubuntu	www.ubuntu.com/security/notices/USN-6226-1
cve	www.cve.org/CVERecord

04 Feb 2026 02:42Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.5

EPSS0.00378