RHEL 7 : numpy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - numpy: crafted serialized object passed in numpy.load in pickle python module allows arbitrary code...

SUSE CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

SUSE: Security Advisory (SUSE-SU-2022:3954-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : python-numpy (SUSE-SU-2022:3954-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3954-1 advisory. - CVE-2017-12852: Fixed missing input validation leading to infinite loops bsc1053963. Bugfixes: - Use update-alternatives for /usr/bin/f2py...

abtests (>=0.0.1 <=0.0.2.1), adjsim (>=2.0.0 <=2.1.0) +108 more potentially affected by CVE-2017-12852 via numpy (>=1.10.0 <=1.13.1)

numpy PYPI version =1.10.0, =0.0.1, =2.0.0, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =1.0.2 - cami-opal =0.2.5 and more Source cves: CVE-2017-12852 Source advisory: OSV:GHSA-FRGW-FGH6-9G52...

Photon OS 1.0: Python PHSA-2021-1.0-0416

An update of the python package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0416. The text itself is copyright C VMware, Inc...

Advisory ROSA-SA-2021-1933

Software: numpy 1.7.1 OS: Cobalt 7.9 CVE-ID: CVE-2017-12852 CVE-Crit: HIGH CVE-DESC: There is no input validation for the numpy.pad function in Numpy 1.13.1 and earlier. An empty list or ndarray will remain in an infinite loop, which may allow attackers to launch a DoS attack. CVE-STATUS: default...

abtests (>=0.0.1 <=0.0.2.1), adjsim (>=2.0.0 <=2.1.0) +108 more potentially affected by CVE-2017-12852 via numpy (>=1.10.0 <=1.13.1)

numpy PYPI version =1.10.0, =0.0.1, =2.0.0, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =1.0.2 - cami-opal =0.2.5 and more Source cves: CVE-2017-12852 Source advisory: OSV:PYSEC-2017-1...

CVE-2017-12852

Removed by vendor...

CVE-2017-12852

CVE-2017-12852 is associated with NumPy’s numpy.pad implementation. The connected documents identify the issue as a missing input validation in numpy.pad for NumPy 1.13.1 and older, where an empty list or ndarray can cause an infinite loop and enable a DoS. Multiple sources (NVD/NPD and Nessus/Op...

CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...