PYSEC-2021-855

🗓️ 17 Dec 2021 19:15:00Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 3 Views

Incomplete string comparison in numpy.core of NumPy 1.9.x allows API failures from crafted strings.

Reporter	Title	Published	Views	Family All 48
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	23 Aug 202222:32	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties Affecting Watson Machine Learning Accelerator on Cloud Pak for Data version	13 Nov 202315:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service, caused by incomplete string comparison in NumPy (CVE-2021-34141)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	17 May 202315:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Python affects IBM watsonx.data	25 Sep 202419:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to a denial of service vulnerability in NumPy (CVE-2021-34141)	3 May 202319:04	–	ibm
BDU FSTEC	The vulnerability of the _convert_from_str() function in the numpy.core module of the NumPy library allows a hacker to initiate data copying.	14 Nov 202200:00	–	bdu_fstec
CBLMariner	CVE-2021-34141 affecting package numpy 1.16.6-2	12 Jan 202509:15	–	cbl_mariner
CBLMariner	CVE-2021-34141 affecting package numpy for versions less than 1.22.0-1	9 Apr 202206:51	–	cbl_mariner
Circl	CVE-2021-34141	17 Dec 202122:37	–	circl