PT-2021-7477 · Numpy +4 · Numpy +4

🗓️ 12 May 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

NumPy core string comparison vulnerability lets crafted objects trigger copying; upgrade to 1.22.0.

Reporter	Title	Published	Views	Family All 249
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	23 Aug 202222:32	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties Affecting Watson Machine Learning Accelerator on Cloud Pak for Data version	13 Nov 202315:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service, caused by incomplete string comparison in NumPy (CVE-2021-34141)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in NumPy. (CVE-2021-33430).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service, caused by a buffer overflow in NumPy (CVE-2021-41496)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in NumPy	30 Mar 202215:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	17 May 202315:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Python affects IBM watsonx.data	25 Sep 202419:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to a denial of service vulnerability in NumPy (CVE-2021-34141)	3 May 202319:04	–	ibm
FreeBSD	py-numpy -- Missing return-value validation of the function PyArray_DescrNew	19 May 202100:00	–	freebsd

Source	Link
github	www.github.com/numpy/numpy/issues/18993
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2021-34141
osv	www.osv.dev/vulnerability/GHSA-fpfv-jqm9-f5jm
osv	www.osv.dev/vulnerability/CVE-2021-34141
ubuntu	www.ubuntu.com/security/CVE-2021-41496
osv	www.osv.dev/vulnerability/USN-5763-1
security-tracker	www.security-tracker.debian.org/tracker/source-package/numpy
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-34141
bdu	www.bdu.fstec.ru/vul/2023-05412
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates

28 Jan 2025 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.15.3 - 5.5

CVSS 25

EPSS0.00173

SSVC