Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-41500
HistoryDec 17, 2021 - 9:15 p.m.

Design/Logic Flaw

2021-12-1721:15:00
PRIOn knowledge base
www.prio-n.com
4

0.001 Low

EPSS

Percentile

35.0%

Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.

CPENameOperatorVersion
cvxoptle1.2.6
fedoraeq34

0.001 Low

EPSS

Percentile

35.0%